Re: X-Frame-Options header

2013-12-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 12/18/13, 10:55 AM, Mark Thomas wrote: > On 18/12/2013 15:48, Dariusz Gorczyca wrote: >> Recently a was working on X-Frame-Options and discovered that >> Tomcat 7 and 8 doesn't support that solution for Clickjacking >> security. One of the solu

Re: X-Frame-Options header

2013-12-18 Thread Mark Thomas
On 18/12/2013 15:48, Dariusz Gorczyca wrote: > Recently a was working on X-Frame-Options and discovered that Tomcat 7 and > 8 doesn't support that solution for Clickjacking security. One of the > solution is to hide Tomcat behind Apache , but it can't be done. Is there > anyone who knows if there

X-Frame-Options header

2013-12-18 Thread Dariusz Gorczyca
Recently a was working on X-Frame-Options and discovered that Tomcat 7 and 8 doesn't support that solution for Clickjacking security. One of the solution is to hide Tomcat behind Apache , but it can't be done. Is there anyone who knows if there are any plans to implement it eg. as a tag in server