diff options
| -rw-r--r-- | src/node/hooks/express.js | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/node/hooks/express.js b/src/node/hooks/express.js index 7e9546c2..61d9ae89 100644 --- a/src/node/hooks/express.js +++ b/src/node/hooks/express.js @@ -71,9 +71,9 @@ exports.restartServer = function () { } app.use(function (req, res, next) { - res.header("X-Frame-Options", "deny"); + // res.header("X-Frame-Options", "deny"); // breaks embedded pads if(settings.ssl){ // if we use SSL - res.header("X-Frame-Options", "max-age=31536000; includeSubDomains"); + res.header("Strict-Transport-Security", "max-age=31536000; includeSubDomains"); } res.header("Server", serverName); |