Project

General

Profile

Actions
Copy link

Bug #86808

closed

HTTP header in backend not set correctly

Added by Chris Müller about 6 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Must have
Assignee:
-
Category:
-
Target version:
-
Start date:
2018-10-30
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
9
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

Looking at the HTTP headers in the backend I discovered, that the X-Frame-Options header is not set correctly:

clickJackingProtection: X-Frame-Options: SAMEORIGIN

Correct would be

X-Frame-Options: SAMEORIGIN

according to https://developer.mozilla.org/de/docs/Web/HTTP/Headers/X-Frame-Options

Actions
Copy link

Also available in: Atom PDF