His fix seem to work on Firefox most versions, and New IE9 and Chrome 34 as I had HTML
code to check for clickjacking and the login page wasn't loading in Chromw 34, IE9 and Firefox(most versions).
His fix seem to work on Firefox most versions, and New IE9 and Chrome 34 as I had HTML
code to check for clickjacking and the login page wasn't loading in Chromw 34, IE9 and Firefox(most versions).
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Firstly, please retrieve the files from inside your Confluence installation folder - the directory into which the Confluence application files and libraries have been unpacked (unzipped) when Confluence was installed:
confluence/WEB-INF/web.xml
Under this portion of the document retrieved:
<!-- Uncomment the following to disable the space export long running task. --> <!-- <context-param> <param-name>unsupportedContainersForExportLongRunningTask</param-name> <param-value>websphere,jboss</param-value> </context-param> -->
Add the following:
<filter> <filter-name>ClickjackFilterSameOrigin</filter-name> <filter-class>org.owasp.filters.ClickjackFilter</filter-class> <init-param> <param-name>mode</param-name> <param-value>SAMEORIGIN</param-value> </init-param> </filter>
also add this:
<filter-mapping> <filter-name>ClickjackFilterSameOrigin</filter-name> <url-pattern>/*</url-pattern> </filter-mapping>
Save the files and put into confluence/WEB-INF/classes
Note that this fix is specific to Firefox, each web browser can use different WebKit versions, and even providers, in order to address with other browser vendor, please refer to the browser specific content, as this page for IE.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Where do you put the filter mapping section? Does it go right underneath the filter section we just added? Also, do you save the web.xml file in the the confluence/WEB-INF/classes and confluence/WEB-INF (where it originally was)?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.