jujugui allows iframing and can be clickjacked in this way
Bug #1295264 reported by
Richard Harding
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| juju-gui |
Fix Released
|
High
|
Francesco Banconi | ||
Bug Description
Update the index.html to not permit browser iframing.
Related branches
lp:~frankban/charms/precise/juju-gui/clickjacking
- charmers: Pending requested
-
Diff: 59 lines (+23/-1)4 files modifiedconfig/apache-site.template (+2/-0)
revision (+1/-1)
server/guiserver/handlers.py (+5/-0)
server/guiserver/tests/test_handlers.py (+15/-0)
| Changed in juju-gui: | |
| status: | Triaged → In Progress |
| assignee: | nobody → Francesco Banconi (frankban) |
| Changed in juju-gui: | |
| status: | In Progress → Fix Released |
To post a comment you must log in.
