huahaofeng
/
aspnetcore
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fix for Issue #319

This commit is contained in:
harshgMSFT 2014-04-28 11:13:07 -07:00
parent 66ca046135
commit 926b335101
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/Microsoft.AspNet.Mvc.Core/AntiForgery/AntiForgeryWorker.cs
View File

@ -115,7 +115,7 @@ namespace Microsoft.AspNet.Mvc
// Adding X-Frame-Options header to prevent ClickJacking. See // Adding X-Frame-Options header to prevent ClickJacking. See
// http://tools.ietf.org/html/draft-ietf-websec-x-frame-options-10 // http://tools.ietf.org/html/draft-ietf-websec-x-frame-options-10
// for more information. // for more information.
httpContext.Response.Headers.Add("X-Frame-Options", new[] { "SAMEORIGIN" }); httpContext.Response.Headers.Set("X-Frame-Options", "SAMEORIGIN");
} }
// <input type="hidden" name="__AntiForgeryToken" value="..." /> // <input type="hidden" name="__AntiForgeryToken" value="..." />