server/web/middlewares/prevent-clickjacking.js

   1 'use strict';
   2
   3 // Don't allow others to iframe embed which can lead to clickjacking
   4 function preventClickjackingMiddleware(req, res, next) {
   5   res.set('X-Frame-Options', 'DENY');
   6
   7   next();
   8 }
   9
  10 module.exports = preventClickjackingMiddleware;