Merged #166 "Fix XRF vulnerability"

src/main/java/com/gitblit/wicket/pages/BasePage.java

diff --git a/src/main/java/com/gitblit/wicket/pages/BasePage.java b/src/main/java/com/gitblit/wicket/pages/BasePage.java
index 4971039..b454b7a 100644
--- a/src/main/java/com/gitblit/wicket/pages/BasePage.java
+++ b/src/main/java/com/gitblit/wicket/pages/BasePage.java
@@ -166,6 +166,9 @@
 			// use default Wicket caching behavior

 			super.setHeaders(response);

 		}

+

+		// XRF vulnerability. issue-500 / ticket-166

+		response.setHeader("X-Frame-Options", "SAMEORIGIN");

 	}

 

 	/**