Arch Linux

miro279

Member

Registered: 2010-10-02

Posts: 153

[SOLVED] nextcloud gives waring after update to 12.0.0-1

after updating nextcloud to 12.0.0-1 I get the following warning on the admin page:

Der „X-Frame-Options“-HTTP-Header ist nicht so konfiguriert, dass er „SAMEORIGIN“ entspricht. Dies ist ein potentielles Sicherheitsrisiko und es wird empfohlen, diese Einstellung zu ändern.

Sorry this is german, but probably still understandable for everyone.
The nextcloud is running in a nginx server, in the respective file the header is set:

add_header X-Frame-Options "SAMEORIGIN";

Where could I start to find where this is coming from?

Last edited by miro279 (2017-05-23 12:45:25)

miro279

Member

Registered: 2010-10-02

Posts: 153

Re: [SOLVED] nextcloud gives waring after update to 12.0.0-1

I solved it by commenting

add_header X-Frame-Options "SAMEORIGIN";

out in /etc/nginx/conf.d/nextcloud.conf.
Strange in my opinion, but with the option unset no complaints anymore..