README.txt in X-Frame-Options Configuration 8

CONTENTS OF THIS FILE
---------------------

* Introduction
* Requirements
* Installation
* Configuration
* Maintainers

INTRODUCTION
------------

The X-Frame-Options HTTP response header can be used to indicate whether or
not a browser should be allowed to render a page in a <frame>, <iframe> or
<object>. Sites can use this to avoid clickjacking attacks, by ensuring that
their content is not embedded into other sites. By default Drupal is
configured to not rendering the site from other sites.

The X-Frame-Options HTTP response header accepts the following directives:
1. DENY
2. SAMEORIGIN
3. ALLOW-FROM uri (Currently [2021-03-15] not accepted by Chrome, Safari, Opera)

There is a new option in the module to not use the header: ALLOW ALL.

This module will allow users to select which directive the site will have in
the response header. With the 'ALLOW-FROM' directive users will be asked to
configure which uri they want to allow to render the site from.

* For a full description of the module, visit the project page:
https://www.drupal.org/project/x_frame_options

* To submit bug reports and feature suggestions, or to track changes:
https://drupal.org/project/issues/x_frame_options

REQUIREMENTS
------------

This module only requires a Drupal 8 installed.

INSTALLATION
------------

Install as you would normally install a contributed Drupal module. Visit:
https://www.drupal.org/docs/8/extending-drupal-8/installing-drupal-8-modules
for further information.

`composer require drupal/x_frame_options_configuration`

Notice the module is x_frame_options_configuration not x_frame_options (as I had initially)

Enable the module with Drush:

`drush en -y x_frame_options_configuration`

CONFIGURATION
-------------

Go to Configuration » System » X-frame-options header
(/admin/config/system/x_frame_options_configuration/settings) and select the
directive you want to use and if asked type the uri you will allow to render
your site from.

MAINTAINERS
-----------

Current maintainers:
* Efrain Herrera (efrainh) - https://www.drupal.org/u/efrainh

File

README.txt

View source

CONTENTS OF THIS FILE
---------------------
   
 * Introduction
 * Requirements
 * Installation
 * Configuration
 * Maintainers


INTRODUCTION
------------

The X-Frame-Options HTTP response header can be used to indicate whether or
not a browser should be allowed to render a page in a ,  or
</li><li><object>. Sites can use this to avoid clickjacking attacks, by ensuring that
</li><li>their content is not embedded into other sites. By default Drupal is
</li><li>configured to not rendering the site from other sites.
</li><li>
</li><li>The X-Frame-Options HTTP response header accepts the following directives:
</li><li>1. DENY
</li><li>2. SAMEORIGIN
</li><li>3. ALLOW-FROM uri (Currently [2021-03-15] not accepted by Chrome, Safari, Opera)
</li><li>
</li><li>There is a new option in the module to not use the header: ALLOW ALL.
</li><li>
</li><li>This module will allow users to select which directive the site will have in
</li><li>the response header. With the 'ALLOW-FROM' directive users will be asked to
</li><li>configure which uri they want to allow to render the site from.
</li><li>
</li><li> * For a full description of the module, visit the project page:
</li><li>   https://www.drupal.org/project/x_frame_options
</li><li>
</li><li> * To submit bug reports and feature suggestions, or to track changes:
</li><li>   https://drupal.org/project/issues/x_frame_options
</li><li>
</li><li>
</li><li>REQUIREMENTS
</li><li>------------
</li><li>
</li><li>This module only requires a Drupal 8 installed.
</li><li>
</li><li>
</li><li>INSTALLATION
</li><li>------------
</li><li>
</li><li>Install as you would normally install a contributed Drupal module. Visit:
</li><li>https://www.drupal.org/docs/8/extending-drupal-8/installing-drupal-8-modules
</li><li>for further information.
</li><li>
</li><li>`composer require drupal/x_frame_options_configuration`
</li><li>
</li><li>Notice the module is x_frame_options_configuration not x_frame_options (as I had initially)
</li><li>
</li><li>Enable the module with Drush:
</li><li>
</li><li>`drush en -y x_frame_options_configuration`
</li><li>
</li><li>
</li><li>CONFIGURATION
</li><li>-------------
</li><li>
</li><li>Go to Configuration » System » X-frame-options header 
</li><li>(/admin/config/system/x_frame_options_configuration/settings) and select the
</li><li>directive you want to use and if asked type the uri you will allow to render
</li><li>your site from.
</li><li>
</li><li>
</li><li>MAINTAINERS
</li><li>-----------
</li><li>
</li><li>Current maintainers:
</li><li> * Efrain Herrera (efrainh) - https://www.drupal.org/u/efrainh
</li></ol></code></pre></details>


<div class="api-objects">
</div>
      
    </div></div> <!-- /.section, /#content -->

        
          <div id="sidebar-second" class="column sidebar"><div class="section">
          <div class="region region-sidebar-second">
    <div id="block-api-navigation" class="block block-api">

    <h2>API Navigation</h2>
  
  <div class="content">
    <div class="item-list"><ul><li class="first"><a href="/api/x_frame_options/8">X-Frame-Options Configuration 8</a></li>
<li><a href="/api/x_frame_options/classes/8">Classes</a></li>
<li><a href="/api/x_frame_options/functions/8">Functions</a></li>
<li><a href="/api/x_frame_options/files/8">Files</a></li>
<li><a href="/api/x_frame_options/namespaces/8">Namespaces</a></li>
<li class="last"><a href="/api/x_frame_options/services/8">Services</a></li>
</ul></div>  </div>
</div>
  </div>
      </div></div> <!-- /.section, /#sidebar-second -->
    
  </div></div> <!-- /#main, /#main-wrapper -->

  
  <div id="footer-wrapper"><div class="section">

    
          <footer id="footer" role="contentinfo" class="clearfix">
          <div class="region region-footer">
    <div id="block-block-1" class="block block-block">

    
  <div class="content">
    <p><footer>Drupal is a registered trademark of Dries Buytaert. This site is not affiliated with Dries Buytaert, Drupal Association or Drupal.org.</footer></p>
  </div>
</div>
  </div>
      </footer> <!-- /#footer -->
    
  </div></div> <!-- /.section, /#footer-wrapper -->

</div></div> <!-- /#page, /#page-wrapper -->
  </body>
</html>

<!-- Page cached by Boost @ 2022-08-16 20:50:37, expires @ 2023-08-15 20:50:37, lifetime 12 months 4 days -->

You are here

README.txt in X-Frame-Options Configuration 8

File