Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Senthil Alwar Muthu (SenthilAlwarM)
Luxoft Singapore Limited
Senthil Alwar Muthu
Luxoft Singapore Limited
SG
SenthilAlwarM Member since 2015 4 posts
Luxoft Singapore Limited
Posted: Jun 9, 2017
Last activity: Jun 9, 2017
Posted: 9 Jun 2017 0:55 EDT
Last activity: 9 Jun 2017 1:08 EDT
Closed

Need Help! In fixing the Cross Frame Scripting vulnerability in Pega Application

Dear Team,

Could you help us in providing the steps to avoid the "Cross Frame Scripting" . Following one more thread understood this is handled in Pega 7 , could you please explain the steps or any little insights in fixing the issue.

To see attachments, please log in.
Security

Posted: 7 years ago
Posted: 9 Jun 2017 1:08 EDT
Bindu Saraf (BinduSaraf)
PEGA
Principal Cloud Development Engineer, Management Plane Services
Pegasystems Inc.
IN

Hi Senthil,

Can you please let us know what is the PRPC version you are using?

Starting from PRPC 7.2.1 you can find the DSS with setting purpose as Http/ResponseHeaders to add or modify the custom headers where you can add X-FRAME-OPTIONS header in PRPC application and provide the value based on your security needs.

You can refer the following link on how to add the custom headers:

https://collaborate.pega.com/discussion/video-support-guide-how-add-or-modify-custom-response-headers

https://community.pega.com/sites/default/files/help_v721/procomhelpmain.htm header/sec-create-custom-header-tsk.htm

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice