Browse Source

Disable iframing of the main domain using meta tags as well

Nariman Jelveh 1 year ago
parent
commit
3cba4cab1e
1 changed files with 3 additions and 0 deletions
  1. 3 0
      packages/backend/src/temp/puter_page_loader.js

+ 3 - 0
packages/backend/src/temp/puter_page_loader.js

@@ -75,6 +75,9 @@ const generate_puter_page_html = ({
     <meta property="og:description" content="${e((short_description).replace(/\n/g, " "))}">
     <meta property="og:image" content="${asset_dir}/images/screenshot.png">
 
+    <!-- disable iframes -->
+    <meta http-equiv="X-Frame-Options" content="sameorigin">
+
     <!-- Twitter meta tags -->
     <meta name="twitter:card" content="summary_large_image">
     <meta property="twitter:domain" content="puter.com">