[tahoe-lafs-trac-stream] [tahoe-lafs] #1455: WUI: ambiently accessible pages should framebust in order to prevent UI redressing attacks
tahoe-lafs
trac at tahoe-lafs.org
Sat Nov 30 22:37:10 UTC 2013
#1455: WUI: ambiently accessible pages should framebust in order to prevent UI
redressing attacks
-----------------------------+---------------------------------------------
Reporter: davidsarah | Owner:
Type: defect | Status: new
Priority: minor | Milestone: undecided
Component: code- | Version: 1.8.2
frontend-web | Keywords: security ambient wui redressing
Resolution: |
Launchpad Bug: |
-----------------------------+---------------------------------------------
Comment (by ChosenOne):
Ha, I think I solved it differently. Please see https://github.com/tahoe-
lafs/tahoe-lafs/pull/72 or https://github.com/freddyb/tahoe-
lafs/commits/ticket1455-x-frame-options
I think warner did the most WUI things, so review appreciated
--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1455#comment:5>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage
More information about the tahoe-lafs-trac-stream
mailing list