Re: how can I add an HTTP to prevent clickjacking to the stats page?

Hi Tim, You are right, I'm running an outdated version. There are plans to upgrade to the latest version soon. Thank you for the example, I learned something new today. Best regards, Cristian Grigoriu > On Jun 18, 2020, at 16:43, Tim Düsterhus wrote: > > Cristian, > > Am 18.06.20 um 15:20

Re: how can I add an HTTP to prevent clickjacking to the stats page?

Cristian, Am 18.06.20 um 15:20 schrieb Cristian Grigoriu: > Thank you for your workaround, it works! > > Here's the output of my haproxy -vv command: > > HA-Proxy version 1.7.5-2 2017/05/17 You really should upgrade to HAProxy 1.7.12 at the very least:

Re: how can I add an HTTP to prevent clickjacking to the stats page?

Hi Jarno, Thank you for your workaround, it works! Here's the output of my haproxy -vv command: HA-Proxy version 1.7.5-2 2017/05/17 Copyright 2000-2017 Willy Tarreau Build options : TARGET = linux2628 CPU = generic CC = gcc CFLAGS = -g -O2

Re: how can I add an HTTP to prevent clickjacking to the stats page?

Hi, On Thu, 2020-06-18 at 10:06 +0300, Cristian Grigoriu wrote: > Hello everyone, > > The vulnerability scanner has flagged the stats page as being vulnerable > to clickjacking. I am trying to fix this, by publishing the stats on its > own frontend and add a header: > > frontend stats > bind

how can I add an HTTP to prevent clickjacking to the stats page?

Hello everyone, The vulnerability scanner has flagged the stats page as being vulnerable to clickjacking. I am trying to fix this, by publishing the stats on its own frontend and add a header: frontend stats bind 10.11.12.13:9000 stats enable stats uri /stats stats refresh 10s #rspadd