fix X-Frame-Options = sameorigin

kochetkov-ma · Sep 23, 2020 · fd5047e · fd5047e
1 parent 05744d3
commit fd5047e
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/main/java/ru/iopump/qa/allure/security/BasicConfiguration.java b/src/main/java/ru/iopump/qa/allure/security/BasicConfiguration.java
@@ -30,7 +30,10 @@ protected void configure(AuthenticationManagerBuilder auth) throws Exception {
 
     @Override
     protected void configure(HttpSecurity http) throws Exception {
-        var spec = http.csrf().disable()
+        var spec = http
+            .headers().frameOptions().sameOrigin()
+            .and()
+            .csrf().disable()
             .requestCache().requestCache(new CustomRequestCache());
         if (cfg.basicAuthEnable()) {
             spec.and().authorizeRequests()