mirror of
https://github.com/btcpayserver/btcpayserver.git
synced 2025-01-19 05:33:31 +01:00
23761eacc1
* Unset X-Frame-Options header correctly According to the [spec](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options) there are onlye the `DENY` and `SAMEORIGIN` options, `ALLOW-FROM` being deprecated. Hence we have to actively unset the header, as we made `DENY` the default. This also unsets the X-Frame-Options header for the public form pages, which fixes #4666. * Ignore anti forgery token in Forms --------- Co-authored-by: nicolas.dorier <nicolas.dorier@gmail.com> |
||
---|---|---|
.. | ||
Models | ||
FormComponentProviders.cs | ||
FormDataExtensions.cs | ||
FormDataService.cs | ||
HtmlFieldsetFormProvider.cs | ||
HtmlInputFormProvider.cs | ||
IFormComponentProvider.cs | ||
ModifyForm.cs | ||
UIFormsController.cs |