Posted - 01/09/2019 : 09:00:30
For those of us on a Windows server it is as simple as adding this into your web.config file: <add name="Content-Security-Policy" value="frame-ancestors 'none';" /> <add name="X-Frame-Options" value="deny" />
Those lines must appear inside <configuration> <system.webserver> <httpProtocol> <customHeaders>
(lines go here)
</customHeaders> </httpProtocol> </system.webserver> </configuration> You likely already have other bits inside your web.config, so you'll just add those lines inside the above tags and always ALWAYS test to see if your site works as errors in a web.config file will keep the entire site from loading at all.
Edited by - Graham Slaughter on 01/09/2019 09:00:54
|