set X-Frame-Options header to deny

2019-12-04 20:13:49 +00:00 · 2019-12-04 20:13:49 +00:00 · 8ed7f2e693
parent 79ac792136
commit 8ed7f2e693
1 changed files with 2 additions and 0 deletions
--- a/server.py
+++ b/server.py
@ -187,6 +187,8 @@ def set_index_page(app):
                request.args,
                res.status_code,
            )
+
+        res.headers["X-Frame-Options"] = "deny"
        return res