java - ClickJacking Filter to add X-FRAME-OPTIONS in response -


in order tackle clickjacking , blocking site opened iframe have created servlet filter in adding below line add "x-frame-options" response header. when run page , see response headers of page never header in there. idea why?

public void dofilter( servletrequest request, servletresponse response, filterchain chain ) throws ioexception, servletexception { httpservletresponse res = (httpservletresponse)response; chain.dofilter(request, response); //specify mode res.addheader("x-frame-options", "deny"); } 

you need add header before calling dofilter. time control returns dofilter headers , body have been sent, addheader ignored.


Comments

Popular posts from this blog

javascript - backbone.js Collection.add() doesn't `construct` (`initialize`) an object -

php - Get uncommon values from two or more arrays -

Adding duplicate array rows in Php -