@robocoder
opened this Issue on September 7th 2010
@robocoder
To mitigate clickjacking, prevent the login form from being framed by another website.
@robocoder
commented
on October 27th 2010
(In [3267]) fixes #1679 - clickjacking countermeasures
There are two aspects of this patch:
- header.tpl - framebuster code
- Controller.php - set the "X-Frame-Options: deny" header in the HTTP response
@robocoder
commented
on November 3rd 2010
(In [3287]) refs #1679
@robocoder
commented
on November 29th 2010
(In [3386]) refs #1679 - config option to enable/disable Login framebuster
@mattab
commented
on December 23rd 2010
@mattab
Added FAQ: How do I enable users to login into Piwik inside an iframe?
let me know if any feedback
@robocoder
commented
on April 14th 2011
This Issue was closed on July 19th 2012