[tahoe-lafs-trac-stream] [tahoe-lafs] #1455: WUI: ambiently accessible pages should framebust in order to prevent UI redressing attacks

tahoe-lafs trac at tahoe-lafs.org
Sat Nov 30 22:37:10 UTC 2013


#1455: WUI: ambiently accessible pages should framebust in order to prevent UI
redressing attacks
-----------------------------+---------------------------------------------
     Reporter:  davidsarah   |      Owner:
         Type:  defect       |     Status:  new
     Priority:  minor        |  Milestone:  undecided
    Component:  code-        |    Version:  1.8.2
  frontend-web               |   Keywords:  security ambient wui redressing
   Resolution:               |
Launchpad Bug:               |
-----------------------------+---------------------------------------------

Comment (by ChosenOne):

 Ha, I think I solved it differently. Please see https://github.com/tahoe-
 lafs/tahoe-lafs/pull/72 or https://github.com/freddyb/tahoe-
 lafs/commits/ticket1455-x-frame-options

 I think warner did the most WUI things, so review appreciated

-- 
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1455#comment:5>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list