ibm mobilefirst - Clickjacking through X-Frame in Worklight 7.0 -


i using mfp 7.0. protect desktop browser app clickjacking through x-frame. there configuration made in server can add x-frame option response header?

yes. feature available in mfp 7.0. use of ifixes later september 2015 feature.

once have ifix installed, can configure desktop browser environment or mobile web app environment prevent clickjacking through x-frames.

the configuration in application-descriptor.xml be:

<mobilewebapp cachemanifest="no-use" xframeoptions="deny"/> <desktopbrowser cachemanifest="no-use" xframeoptions="deny"/>  

the other options available :

no-use

or

sameorigin

more details here.


Comments

Popular posts from this blog

networking - Vagrant-provisioned VirtualBox VM is not reachable from Ubuntu host -

c# - ASP.NET Core - There is already an object named 'AspNetRoles' in the database -

ruby on rails - ArgumentError: Missing host to link to! Please provide the :host parameter, set default_url_options[:host], or set :only_path to true -