mirror of
https://github.com/jellyfin/jellyfin.git
synced 2026-03-22 18:23:45 +00:00
add xframe setting
This commit is contained in:
@@ -12,10 +12,12 @@ namespace MediaBrowser.Server.Implementations.HttpServer
|
||||
{
|
||||
private static readonly CultureInfo UsCulture = new CultureInfo("en-US");
|
||||
private readonly ILogger _logger;
|
||||
private readonly Func<bool> _denyIframeEmbedding;
|
||||
|
||||
public ResponseFilter(ILogger logger)
|
||||
public ResponseFilter(ILogger logger, Func<bool> denyIframeEmbedding)
|
||||
{
|
||||
_logger = logger;
|
||||
_denyIframeEmbedding = denyIframeEmbedding;
|
||||
}
|
||||
|
||||
/// <summary>
|
||||
@@ -28,7 +30,11 @@ namespace MediaBrowser.Server.Implementations.HttpServer
|
||||
{
|
||||
// Try to prevent compatibility view
|
||||
res.AddHeader("X-UA-Compatible", "IE=Edge");
|
||||
res.AddHeader("X-Frame-Options", "DENY");
|
||||
|
||||
if (_denyIframeEmbedding())
|
||||
{
|
||||
res.AddHeader("X-Frame-Options", "DENY");
|
||||
}
|
||||
|
||||
var exception = dto as Exception;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user