Set xFrameOptions fallback

2016-07-15 11:08:11 +02:00
parent 286f360908
commit a49e1b5117
2 changed files with 4 additions and 1 deletions
--- a/src/appdb.js
+++ b/src/appdb.js
@@ -92,6 +92,9 @@ function postProcess(result) {
    result.accessRestriction = safe.JSON.parse(result.accessRestrictionJson);
    if (result.accessRestriction && !result.accessRestriction.users) result.accessRestriction.users = [];
    delete result.accessRestrictionJson;
+
+    // TODO remove later once all apps have this attribute
+    result.xFrameOptions = result.xFrameOptions || 'SAMEORIGIN';
 }

 function get(id, callback) {