Re: Security Tracker Frame Options Header

2018-01-17 Thread Paul Wise
On Wed, Jan 17, 2018 at 4:43 PM, Mattia Dorigatti wrote: > I've worked around this by using Netscape Netscape is a long-dead and probably by now a very insecure browser, I would suggest you avoid it. > though I can't figure out what "nnn" stands for. A number? The Debian bug number, which is di

AW: Security Tracker Frame Options Header

2018-01-17 Thread Mattia Dorigatti | Brandnamic
; What is "nnn" and where do I find it? Thanks, Mattia -Ursprüngliche Nachricht- Von: paul.is.w...@gmail.com [mailto:paul.is.w...@gmail.com] Im Auftrag von Paul Wise Gesendet: Samstag, 13. Januar 2018 04:21 An: Mattia Dorigatti | Brandnamic Cc: debian-security-tracker@lists.debian.or

Re: Security Tracker Frame Options Header

2018-01-12 Thread Paul Wise
On Fri, Jan 12, 2018 at 4:59 PM, Mattia Dorigatti wrote: > I have a question. Why do the security tracker sites have the > X-Frame-Options:sameorigin header set? Because I've wanted to keep an eye on > some CVEs I've created a simple html site with three iframes and the refresh > meta tag so th

Security Tracker Frame Options Header

2018-01-12 Thread Mattia Dorigatti | Brandnamic
Hi, I have a question. Why do the security tracker sites have the X-Frame-Options:sameorigin header set? Because I've wanted to keep an eye on some CVEs I've created a simple html site with three iframes and the refresh meta tag so that I could put it on an extra monitor and have a look at the