From 8b43e7a60194f3b51b0c89cbbe0e0cdd09df3f0d Mon Sep 17 00:00:00 2001 From: AdrianoDev Date: Mon, 21 Sep 2026 23:22:50 +0200 Subject: [PATCH] fix(deploy): X-Frame-Options coerente fra Traefik e nginx (#38.11) traefik.http.middlewares.tmflow-headers.headers.frameDeny=true dava DENY in produzione, mentre nginx.conf (dev) usa SAMEORIGIN. Sostituito con customFrameOptionsValue=SAMEORIGIN per allineare le due vie di deploy. Co-Authored-By: Claude Sonnet 5 --- docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-compose.yml b/docker-compose.yml index a3f688b..b985128 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -116,7 +116,7 @@ services: - "traefik.http.middlewares.tmflow-headers.headers.forceSTSHeader=true" - "traefik.http.middlewares.tmflow-headers.headers.STSIncludeSubdomains=true" - "traefik.http.middlewares.tmflow-headers.headers.STSPreload=true" - - "traefik.http.middlewares.tmflow-headers.headers.frameDeny=true" + - "traefik.http.middlewares.tmflow-headers.headers.customFrameOptionsValue=SAMEORIGIN" - "traefik.http.routers.tmflow-web.middlewares=tmflow-headers" networks: - tmflow-net