btcpayserver/BTCPayServer/Plugins/PointOfSale
d11n 23761eacc1
Unset X-Frame-Options header correctly (#4721)
* Unset X-Frame-Options header correctly

According to the [spec](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options) there are onlye the `DENY` and `SAMEORIGIN` options, `ALLOW-FROM` being deprecated. Hence we have to actively unset the header, as we made `DENY` the default.

This also unsets the X-Frame-Options header for the public form pages, which fixes #4666.

* Ignore anti forgery token in Forms

---------

Co-authored-by: nicolas.dorier <nicolas.dorier@gmail.com>
2023-03-01 15:27:18 +09:00
..
Controllers Unset X-Frame-Options header correctly (#4721) 2023-03-01 15:27:18 +09:00
Models Store branding: Unify public pages (#4568) 2023-01-30 09:23:49 +01:00
PointOfSalePlugin.cs Make POS and Crowdfund plugins 2022-08-21 08:38:25 +02:00