[MediaWiki-commits] [Gerrit] operations/puppet[production]: annualreport: add X-Frame-Options header to Apache config

[Dzahn (Code Review)]

Dzahn has submitted this change and it was merged. ( 
https://gerrit.wikimedia.org/r/339803 )

Change subject: annualreport: add X-Frame-Options header to Apache config
..


annualreport: add X-Frame-Options header to Apache config

As recommended by Darian Patrick in T151798#3053857
add X-Frame-Options header with DENY, to prevent click jacking
attacks.

Bug: T151798
Change-Id: I867f4ed771816fa2f546b96f3ae6dd0f855fb90e
---
M modules/annualreport/files/annual.wikimedia.org
1 file changed, 2 insertions(+), 0 deletions(-)

Approvals:
  jenkins-bot: Verified
  Dzahn: Looks good to me, approved



diff --git a/modules/annualreport/files/annual.wikimedia.org 
b/modules/annualreport/files/annual.wikimedia.org
index 2b16bed..568e8de 100644
--- a/modules/annualreport/files/annual.wikimedia.org
+++ b/modules/annualreport/files/annual.wikimedia.org
@@ -11,6 +11,8 @@
 LogLevel warn
 CustomLog /var/log/apache2/access.log wmf
 
+Header always append X-Frame-Options DENY
+
 
 Require all granted
 

-- 
To view, visit https://gerrit.wikimedia.org/r/339803
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I867f4ed771816fa2f546b96f3ae6dd0f855fb90e
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn 
Gerrit-Reviewer: Dpatrick 
Gerrit-Reviewer: Dzahn 
Gerrit-Reviewer: jenkins-bot <>

___
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

[MediaWiki-commits] [Gerrit] operations/puppet[production]: annualreport: add X-Frame-Options header to Apache config

[Dzahn (Code Review)]

Dzahn has uploaded a new change for review. ( 
https://gerrit.wikimedia.org/r/339803 )

Change subject: annualreport: add X-Frame-Options header to Apache config
..

annualreport: add X-Frame-Options header to Apache config

As recommended by Darian Patrick in T151798#3053857
add X-Frame-Options header with DENY, to prevent click jacking
attacks.

Bug: T151798
Change-Id: I867f4ed771816fa2f546b96f3ae6dd0f855fb90e
---
M modules/annualreport/files/annual.wikimedia.org
1 file changed, 2 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/03/339803/1

diff --git a/modules/annualreport/files/annual.wikimedia.org 
b/modules/annualreport/files/annual.wikimedia.org
index 2b16bed..568e8de 100644
--- a/modules/annualreport/files/annual.wikimedia.org
+++ b/modules/annualreport/files/annual.wikimedia.org
@@ -11,6 +11,8 @@
 LogLevel warn
 CustomLog /var/log/apache2/access.log wmf
 
+Header always append X-Frame-Options DENY
+
 
 Require all granted
 

-- 
To view, visit https://gerrit.wikimedia.org/r/339803
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I867f4ed771816fa2f546b96f3ae6dd0f855fb90e
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn 

___
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits