From a3953a46f401e075c4319a49cf4c88825d78ce17 Mon Sep 17 00:00:00 2001 From: Ben Bodenmiller Date: Wed, 20 Aug 2014 13:31:15 -0700 Subject: change X-Frame-Options to SAMEORIGIN needed to allow sidekiq to load on background jobs tab --- lib/support/nginx/gitlab-ssl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'lib/support/nginx') diff --git a/lib/support/nginx/gitlab-ssl b/lib/support/nginx/gitlab-ssl index 8f94844d3f9..e3a3dc8a1da 100644 --- a/lib/support/nginx/gitlab-ssl +++ b/lib/support/nginx/gitlab-ssl @@ -81,7 +81,7 @@ server { ssl_prefer_server_ciphers on; add_header Strict-Transport-Security max-age=63072000; - add_header X-Frame-Options DENY; + add_header X-Frame-Options SAMEORIGIN; add_header X-Content-Type-Options nosniff; ## Individual nginx logs for this GitLab vhost -- cgit v1.2.1