closes #2151

10 years ago · 05894d14c6
parent 200f74f1c7
commit 05894d14c6
1 changed files with 3 additions and 2 deletions
--- a/src/middleware/index.js
+++ b/src/middleware/index.js
@ -68,10 +68,11 @@ module.exports = function(app) {

 	app.use(function (req, res, next) {
 		res.setHeader('X-Powered-By', 'NodeBB');
-		res.setHeader('X-Frame-Options', 'SAMEORIGIN');

 		if (meta.config['allow-from-uri']) {
-			res.setHeader('ALLOW-FROM', meta.config['allow-from-uri']);
+			res.setHeader('X-Frame-Options', 'ALLOW-FROM ' + meta.config['allow-from-uri']);
+		} else {
+			res.setHeader('X-Frame-Options', 'SAMEORIGIN');
 		}

 		next();