https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=16210 Mirko Tietgen <mirko@abunchofthings.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mirko@abunchofthings.net --- Comment #5 from Mirko Tietgen <mirko@abunchofthings.net> --- (In reply to Jonathan Druart from comment #4)
If I understand correctly, setting X-Frame-Options to SAMEORIGIN should be enough for mordern browsers: https://developer.mozilla.org/en-US/docs/Web/HTTP/X-Frame-Options
The antiClickjack trick could be removed if we decide not to support them anymore.
Supported are Firefox 3.6.9 September 2010 IE 8 March 2008 Opera 10.5 March 2010 Safari 4 February 2009 Chrome 4.1.… somewhen 2010 If that fixes the problem in general I vote for using it. One thing that needs to be checked if it works with recent mobile browsers, the website does not really say that. -- You are receiving this mail because: You are watching all bug changes.