From 99436c1334440bb0b6a0534476c2470020f7ea5b Mon Sep 17 00:00:00 2001
From: Darknet Villain <supervillain@riseup.net>
Date: Fri, 3 Feb 2017 14:13:55 -0500
Subject: [PATCH] Added protection from clickjacking (#706)

---
 HTTPServer.cpp | 1 +
 1 file changed, 1 insertion(+)

diff --git a/HTTPServer.cpp b/HTTPServer.cpp
index 184e02b1..1b4512eb 100644
--- a/HTTPServer.cpp
+++ b/HTTPServer.cpp
@@ -875,6 +875,7 @@ namespace http {
 
 	void HTTPConnection::SendReply (HTTPRes& reply, std::string& content)
 	{
+		reply.add_header("X-Frame-Options", "SAMEORIGIN");
 		reply.add_header("Content-Type", "text/html");
 		reply.body = content;