Merge pull request #3739 from davecocoa/feature/3534-add-x-frame-header

add x-frame headers
2012-11-20 09:59:08 -08:00 · 2012-11-20 09:59:08 -08:00 · 742d320c0e
commit 742d320c0e
parent 1af49a0477 9678a1d4b2
2 changed files with 6 additions and 0 deletions
--- a/4
+++ b/4
@ -12,6 +12,10 @@ gem 'rails_autolink', '1.0.9'

 gem 'rack-cors', '0.2.7', :require => 'rack/cors'

+# click-jacking protection
+
+gem 'rack-protection', '1.2'
+
 # authentication

 gem 'devise', '2.1.2'
--- a/config.ru
+++ b/config.ru
@ -14,4 +14,6 @@ if defined?(Unicorn)
 end
 use Rack::Deflater
 use Rack::ChromeFrame, :minimum => 8
+use Rack::Protection::FrameOptions
+
 run Diaspora::Application