Bloque l'affichage du site dans une iframe

fclety · Jan 23, 2017 · e677181 · e677181
1 parent 93a14af
commit e677181
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 7 deletions.
diff --git a/.htaccess b/.htaccess
@@ -108,13 +108,11 @@
 </IfModule>
 
 # Avoid Clickjacking and enable XSS-protection for browsers
-<FilesMatch "\.(pl|php|cgi|spl)$">
-  <IfModule mod_headers.c>
-    # security
-    Header set X-Frame-Options "DENY"
-    Header set X-XSS-Protection "1; mode=block"
-  </IfModule>
-</FilesMatch>
+<IfModule mod_headers.c>
+  # security
+  Header set X-Frame-Options "DENY"
+  Header set X-XSS-Protection "1; mode=block"
+</IfModule>
 
 
 

diff --git a/index.html b/index.html
@@ -4,6 +4,7 @@
         <meta charset="utf-8">
         <meta name="description" content="Quelques-unes des meilleures répliques sonores de Kaamelott. C'était ça ou chante Sloubi.">
         <meta http-equiv="X-UA-Compatible" content="IE=edge">
+        <meta http-equiv="X-Frame-Options" content="deny">
         <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />
 
         <title>Kaamelott Soundboard</title>