Support x-frame-options in appconfig.ejs template

2016-07-14 14:01:25 +02:00
parent 4b40084c7f
commit 66049a9e2d
4 changed files with 8 additions and 6 deletions
--- a/setup/start/nginx/appconfig.ejs
+++ b/setup/start/nginx/appconfig.ejs
@@ -25,7 +25,7 @@ server {
    add_header Strict-Transport-Security "max-age=15768000; includeSubDomains";

    # https://developer.mozilla.org/en-US/docs/Web/HTTP/X-Frame-Options
-    add_header X-Frame-Options SAMEORIGIN;
+    add_header X-Frame-Options <%= xFrameOptions %>;

    proxy_http_version 1.1;
    proxy_intercept_errors on;