From 14a74b7d6d715e663b8f7cc918266222537df14b Mon Sep 17 00:00:00 2001 From: Ayane Satomi Date: Thu, 12 Sep 2019 23:20:01 +0800 Subject: [PATCH] [doc/self-hosted] make XFO same origin in docs As reported in GH-962, this breaks VSCode's extension details view. Might need further triage if its also a v2 internal issue. --- doc/self-hosted/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/self-hosted/index.md b/doc/self-hosted/index.md index 7e5bd45856d9..de88e2577af3 100644 --- a/doc/self-hosted/index.md +++ b/doc/self-hosted/index.md @@ -148,7 +148,7 @@ server { # real_ip_header CF-Connecting-IP; # Other security options. - add_header X-Frame-Options DENY; + add_header X-Frame-Options SAMEORIGIN; add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection "1; mode=block";