diff options
| author | Christopher Speller <crspeller@gmail.com> | 2015-07-28 10:03:10 -0400 |
|---|---|---|
| committer | Christopher Speller <crspeller@gmail.com> | 2015-07-28 10:03:10 -0400 |
| commit | ec2e61bc55aa12c4157937ed6492e109ad3422ae (patch) | |
| tree | 39d59e2233349a98208c246c9acb878955af6a78 /web/templates | |
| parent | 94b905aff5470dbe18037f7ee5e883b51bf228fd (diff) | |
| parent | ce2cf5b4e8c8fbd5df203787f94b781a95066057 (diff) | |
| download | chat-ec2e61bc55aa12c4157937ed6492e109ad3422ae.tar.gz chat-ec2e61bc55aa12c4157937ed6492e109ad3422ae.tar.bz2 chat-ec2e61bc55aa12c4157937ed6492e109ad3422ae.zip | |
Merge pull request #253 from nickago/MM-1654
MM-1654 Anti-clickjacking measures
Diffstat (limited to 'web/templates')
| -rw-r--r-- | web/templates/head.html | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/web/templates/head.html b/web/templates/head.html index d14340998..7a7d4fe8e 100644 --- a/web/templates/head.html +++ b/web/templates/head.html @@ -36,6 +36,13 @@ <script type="text/javascript" src="https://cloudfront.loggly.com/js/loggly.tracker.js" async></script> <script id="config" type="text/javascript" src="/static/config/config.js"></script> + <style id="antiClickjack">body{display:none !important;}</style> + <script type="text/javascript"> + if (self === top) { + var blocker = document.getElementById("antiClickjack"); + blocker.parentNode.removeChild(blocker); + } + </script> <script> if (config == null) { config = {}; |