Skip to content

fix: prevent clickjacking with X-Frame-Options - #2239

Open
mirunagherman wants to merge 1 commit into
mainfrom
miruna/int1-683
Open

mirunagherman wants to merge 1 commit into
mainfrom
miruna/int1-683

Conversation

@mirunagherman

@mirunagherman mirunagherman commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

Context

  • fixes INT1-683 - Findings from the security audit - Missing or Misconfigured X-Frame-Options Header

Changes

  • Prevent the application from being embedded in iframes by adding X-Frame-Options: DENY and a CSP frame-ancestors 'none' directive to responses.

@mirunagherman mirunagherman self-assigned this Sep 15, 2026
@github-actions github-actions Bot added package: wallet/frontend Wallet frontend implementations type: source Source changes labels Sep 15, 2026
@mirunagherman
mirunagherman marked this pull request as ready for review September 15, 2026 07:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

package: wallet/frontend Wallet frontend implementations type: source Source changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants