hop
hop copied to clipboard
Security vulnerability: use X-Frame-Options header as default
All Hop websites (without any special configuration) are vulnerable to click jacking (or UI redress attack). Can we please have a default http header? For example,
X-Frame-Options: SAMEORIGIN
see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options