revi-archive/phorge-phorge
1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2024-12-02 03:32:42 +01:00
Code Issues Releases Wiki Activity
1366 commits 3 branches 7 tags 153 MiB
Commit graph

4 commits

Author SHA1 Message Date
Jason Ge
5284053c0e Add X-Frame-Options for all response 
Summary:
we use to only add X-Frame-Options for AphrontWebpageResponse.
There some security concern about it. Example of a drag-drop attack:
http://sites.google.com/site/tentacoloviola/. The fix is to add it to
all AphrontResponse.

Test Plan:
View page which disalble this option still works (like the
xhpast tree page); verify that the AphrontAjaxResponse contains the
X-Frame-Options in the header.

Reviewers: epriestley, benmathews

Reviewed By: epriestley

CC: nh, aran, jungejason, epriestley

Differential Revision: 926
 2011-09-14 10:43:24 -07:00
epriestley
21286a723e Lint slop and some cleanup. 
Summary:

Test Plan:

Reviewers:

CC:
 2011-02-22 09:22:57 -08:00
epriestley
17a4069f01 Security: tighten up the File tool against clowning around. 
Summary:

Test Plan:

Reviewers:

CC:
 2011-02-22 09:19:14 -08:00
epriestley
0eac30d80d Phabricator file upload application. 2011-01-23 14:04:07 -08:00