Ghost/core
Kevin Ansfield f88adb9180
Added x-frame-options header to /ghost/ route (#10760)
no issue
- by default the `/ghost/` route will add an `x-frame-options: sameorigin` header to the response to help protect the admin area against clickjacking
- the header can be disabled by adding `"adminFrameProtection": false` to the `config.{env}.json` configuration file

Credits: Muhammad Fawwad Obaida
2019-05-28 09:04:48 +01:00
..
client@48df541989 Updated Ghost-Admin to 2.23.0 2019-05-27 10:57:22 +01:00
server Added x-frame-options header to /ghost/ route (#10760) 2019-05-28 09:04:48 +01:00
test Added x-frame-options header to /ghost/ route (#10760) 2019-05-28 09:04:48 +01:00
index.js