James Moger
2014-09-08 0601663aec4ffd24e24abc97cf360529de5c716c
src/main/java/com/gitblit/wicket/pages/BasePage.java
@@ -93,6 +93,13 @@
      if (app().settings().getBoolean(Keys.web.useResponsiveLayout, true)) {
         add(CSSPackageResource.getHeaderContribution("bootstrap/css/bootstrap-responsive.css"));
      }
      if (app().settings().getBoolean(Keys.web.hideHeader, false)) {
         add(CSSPackageResource.getHeaderContribution("hideheader.css"));
      }
   }
   protected String getContextUrl() {
      return getRequest().getRelativePathPrefixToContextRoot();
   }
   protected String getCanonicalUrl() {
@@ -159,6 +166,9 @@
         // use default Wicket caching behavior
         super.setHeaders(response);
      }
      // XRF vulnerability. issue-500 / ticket-166
      response.setHeader("X-Frame-Options", "SAMEORIGIN");
   }
   /**