Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

SEC-2511: Remove double ALLOW-FROM from X-Frame-Options header. 

The interface documentation for getAllowFromValue states: Gets the value for ALLOW-FROM excluding the ALLOW-FROM.
This commit is contained in:
getvictor 2014-02-09 10:34:42 -06:00 committed by Rob Winch
parent 4cdeacc277
commit 6de138c2f2
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
web/src/main/java/org/springframework/security/web/header/writers/frameoptions/AbstractRequestParameterAllowFromStrategy.java
View File

@ -30,7 +30,7 @@ abstract class AbstractRequestParameterAllowFromStrategy implements AllowFromStr
log.debug("Supplied origin '"+allowFromOrigin+"'"); log.debug("Supplied origin '"+allowFromOrigin+"'");
} }
if (StringUtils.hasText(allowFromOrigin) && allowed(allowFromOrigin)) { if (StringUtils.hasText(allowFromOrigin) && allowed(allowFromOrigin)) {
return "ALLOW-FROM " + allowFromOrigin; return allowFromOrigin;
} else { } else {
return "DENY"; return "DENY";
} }