Make X-Frame-Options configurable

This issue is archived. You can view it, but you can't modify it. Learn more

XMLWordPrintable

      Jenkins 1.532.2 sets X-Frame-Options to sameorigin |https://github.com/cloudbees/hudson/commit/16931bd7bf7560e26ef98328b8e95e803d0e90f6]. While this prevents attacks via frame embedding, it also prevents any desirable embedding of Jenkins in a frame.

      This should be configurable "somehow." Either via an extension point, or allowing PageDecorators to set the header property by changing the order of layout.jelly.

            Assignee:
            Daniel Beck
            Reporter:
            Ryan Campbell
            Archiver:
            Jenkins Service Account

              Created:
              Updated:
              Resolved:
              Archived: