James Moger
2014-09-26 600d43db0c6c19fafa2f5f313170f31cc82acb9c
src/main/java/com/gitblit/wicket/pages/BasePage.java
@@ -166,6 +166,9 @@
         // use default Wicket caching behavior
         super.setHeaders(response);
      }
      // XRF vulnerability. issue-500 / ticket-166
      response.setHeader("X-Frame-Options", "SAMEORIGIN");
   }
   /**