[FALCON-2117] Implement X-Frame-Options header for Falcon UI

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Fix Version/s: trunk
• Assignee: Sowmya Ramesh
• Reporter: Sowmya Ramesh
• Created: 16/Aug/16 23:56
• Updated: 16/Aug/16 23:56

Description

implement the X-Frame-Options for Falcon UI: DENY header in response.

For security this should be implemented to prevent potential security issue allowing click-jacking.

1. Access Falcon UI via curl or browser.
2. Check for X-Frame-Options in the Response Header.