Allow qr code iframe

Signed-off-by: Christian König <ckoenig@posteo.de>
pull/4461/head
Christian König 3 years ago
parent 8d6ce78c65
commit 2eff53b2bb
No known key found for this signature in database
GPG Key ID: 4CDA6F249DD2B485

@ -93,8 +93,10 @@ $HTTP["url"] =~ "/teleporter\.php$" {
} }
# allow API qr code iframe on settings page # allow API qr code iframe on settings page
$HTTP["url"] =~ "/admin/settings\.php$" { $HTTP["url"] =~ "/api_token\.php$" {
setenv.add-response-header = ( "X-Frame-Options" => "SAMEORIGIN" ) $HTTP["referer"] =~ "/admin/settings\.php" {
setenv.add-response-header = ( "X-Frame-Options" => "SAMEORIGIN" )
}
} }
# Default expire header # Default expire header

@ -101,8 +101,10 @@ $HTTP["url"] =~ "/teleporter\.php$" {
} }
# allow API qr code iframe on settings page # allow API qr code iframe on settings page
$HTTP["url"] =~ "/admin/settings\.php$" { $HTTP["url"] =~ "/api_token\.php$" {
setenv.add-response-header = ( "X-Frame-Options" => "SAMEORIGIN" ) $HTTP["referer"] =~ "/admin/settings\.php" {
setenv.add-response-header = ( "X-Frame-Options" => "SAMEORIGIN" )
}
} }
# Default expire header # Default expire header

Loading…
Cancel
Save