[java-identity-provider COMMIT] in /trunk/idp-conf/src/main/resources: conf/idp.properties system/conf/global-system.xml

[noreply at shibboleth.net]

Author: scantor
Date: Sun Dec 11 15:05:03 2016
New Revision: 8581

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=8581&view=rev
Log:
IDP-627 - Support HSTS, CSP, X-Frame-Options, etc.

https://issues.shibboleth.net/jira/browse/IDP-627

Add X-Frame-Options: hook, but unset for new installs.

Modified:
    trunk/idp-conf/src/main/resources/conf/idp.properties
    trunk/idp-conf/src/main/resources/system/conf/global-system.xml

Modified: trunk/idp-conf/src/main/resources/conf/idp.properties
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/idp.properties?rev=8581&r1=8580&r2=8581&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/idp.properties	(original)
+++ trunk/idp-conf/src/main/resources/conf/idp.properties	Sun Dec 11 15:05:03 2016
@@ -16,6 +16,8 @@
 
 # HSTS response header policy
 #idp.hsts.maxAge = 0
+# X-Frame-Options value, set to DENY or SAMEORIGIN to block framing
+#idp.frameoptions = 
 
 # Set the location of user-supplied web flow definitions
 #idp.webflows = %{idp.home}/flows

Modified: trunk/idp-conf/src/main/resources/system/conf/global-system.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/conf/global-system.xml?rev=8581&r1=8580&r2=8581&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/conf/global-system.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/conf/global-system.xml	Sun Dec 11 15:05:03 2016
@@ -137,6 +137,7 @@
         <property name="sourceMap">
             <map>
                 <entry key="Strict-Transport-Security" value="max-age=%{idp.hsts.maxAge:0}" />
+                <entry key="X-Frame-Options" value="%{idp.frameoptions:}" />
             </map>
         </property>
     </bean>