Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The "SAMEORIGIN" warning does not go away! #11507

Closed
ddi98 opened this issue Oct 1, 2018 · 2 comments
Closed

The "SAMEORIGIN" warning does not go away! #11507

ddi98 opened this issue Oct 1, 2018 · 2 comments

Comments

@ddi98
Copy link

ddi98 commented Oct 1, 2018

Steps to reproduce

Hi, after the update to nextcloud the following configuration message appeared:

The "X-Frame-Options" HTTP header is not configured as "SAMEORIGIN". This is a potential security or privacy risk, and we recommend changing this setting.

To solve the security bug I added the following string in the .htaccess file:
Header always append X-Frame-Options SAMEORIGIN

But the warning continues to show up.

What is this problem due to? thank you so much

PHP version: 7.2.8

Nextcloud version: 14.0.1

@MorrisJobke
Copy link
Member

As this seems to be a setup issue I would like to ask you to raise your question in the forums: https://help.nextcloud.com

If you wish support with setup issues from Nextcloud GmbH we offer this as part of the Nextcloud subscription. Learn more about this at https://nextcloud.com/enterprise/

@nextcloud-bot
Copy link
Member

GitMate.io thinks possibly related issues are #5975 (Preview of theming does not work anymore), #11085 (Relation does not exist), #6350 (does not allow me to create users), #4764 (duplicate X-Frame-Options: SAMEORIGIN in header, triggers no NO SAMEORIGIN Warning in admin panel), and #9199 (Search does not take effect).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants