Merged #164 "Sanitize page parameters for XSS vulerabilities"

James Moger

2014-09-07 f9c661ef5d2a422f246b3a089bee06470ae1d431

 src/main/java/com/gitblit/wicket/pages/BasePage.java

@@ -166,6 +166,9 @@
         // use default Wicket caching behavior

         super.setHeaders(response);

      }



      // XRF vulnerability. issue-500 / ticket-166

      response.setHeader("X-Frame-Options", "SAMEORIGIN");

   }



   /**