frameprevention 8.x-1.0

Upgrade from 7.x-2.1. Swaps OWASP CSS/Javascript code for Stanford code due to working around some deprecation of some Drupal APIs that haven't settled yet.

frameprevention 6.x-2.1

Bug fixes

#2314057: Breakages of file upload AJAX

Separates the CSS/JS frame-breaker from the HTTP header-based one so only one can be used and not the other.

frameprevention 7.x-2.1

Bug fixes

#2314057: Breakages of file upload AJAX

To workaround file upload breakage introduced in 7.x-2.0, add file/ajax/* to your frameprevention exclusion list.

frameprevention 6.x-2.0

New features

Use a newer, OWASP-recommended Javascript code block to break from frames.

Add support for the X-Frame-Options HTTP response header.

frameprevention 7.x-2.0

New features

Use a newer, OWASP-recommended Javascript code block to break from frames.

Add support for the X-Frame-Options HTTP response header.

frameprevention 5.x-1.1

Bug fixes

Bugfixes:

  • #159674 fatal errors for anonymous users (functions are missing when caching is activated)
  • add an uninstaller function for module removal cleanliness
  • break up an if statement that was making frameprevention break-out of frames before it was activated on the settings page

frameprevention 5.x-1.0

New features
  • Disable the module for selected pages/nodes (e.g. img_assist)
  • XHTML DTD supported for the javascript
Subscribe with RSS Subscribe to Releases for Frameprevention