Question
AIG
IN
Last activity: 21 Jul 2017 9:59 EDT
Missing Cross-Frame Scripting Defence
Hi all,
We got this APP SCAN issue for our application.
Do we have any solution to fix it?
Thanks & Regards,
M.L.Prabhakaran.
***Updated by moderator: Lochan to close post***
This post has been archived for educational purposes. Contents and links will no longer be updated. If you have the same/similar question, please write a new post.
Accepted Solution
Pegasystems Inc.
US
The customer has opened an SR for this question due to the sensitive nature of the information required to analyze the issue.
The Subject Matter Expert has provided the following information:
As "Cross Frame Scripting" causes the frames to be inserted, we need to include "X-Frame-Options" header in the response from PRPC.
As of PRPC 6.3SP1 there is no option to add the same at the application level, so this needs to be addressed through a local change. This has been handled in Pega 7.*.
Pegasystems Inc.
IN
Hi Prabhakaran,
Share the result for the Which all URL you have received this Issue. What version of PRPC you are having.
Thanks
Gaurav
AIG
IN
Gaurav,
My application is built on 6.3SP1.
Can you please send a test mail to [email protected]
I will send the report to You.
Thanks,
Prabhakaran
Accepted Solution
Pegasystems Inc.
US
The customer has opened an SR for this question due to the sensitive nature of the information required to analyze the issue.
The Subject Matter Expert has provided the following information:
As "Cross Frame Scripting" causes the frames to be inserted, we need to include "X-Frame-Options" header in the response from PRPC.
As of PRPC 6.3SP1 there is no option to add the same at the application level, so this needs to be addressed through a local change. This has been handled in Pega 7.*.
