diff options
| -rw-r--r-- | install/conf/ipa.conf | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/install/conf/ipa.conf b/install/conf/ipa.conf index 8d4fea35e..cf10fc815 100644 --- a/install/conf/ipa.conf +++ b/install/conf/ipa.conf @@ -1,5 +1,5 @@ # -# VERSION 19 - DO NOT REMOVE THIS LINE +# VERSION 20 - DO NOT REMOVE THIS LINE # # This file may be overwritten on upgrades. # @@ -71,6 +71,8 @@ WSGIScriptReloading Off ErrorDocument 401 /ipa/errors/unauthorized.html WSGIProcessGroup ipa WSGIApplicationGroup ipa + Header always append X-Frame-Options DENY + Header always append Content-Security-Policy "frame-ancestors 'none'" </Location> # Turn off Apache authentication for sessions |