app-backend: disallow all iframe embedding of the app

Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-12-29 11:45:20 +01:00
parent 0fdac13e7d
commit 9d9cfc1b8a
3 changed files with 9 additions and 0 deletions
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-app-backend': patch
+---
+
+Set `X-Frame-Options: deny` rather than the default `sameorigin` for all content served by the `app-backend`.`