Forum

Hi hugo,

I just installed owncloud on our server and I get the following error message:

The "X-Frame-Options" HTTP header is not configured to equal to "SAMEORIGIN". This is a potential security or privacy risk and we recommend adjusting this setting.

I don't understand why as I have the following in my config file:

VirtualHost {
 ...
 CustomHeader = X-Frame-Options: sameorigin
 CustomHeader = Vary: Accept-Encoding
...

Could you please tell me if I have missed / misconfigured something?

Thank you

I don't know how and why ownCloud sends that message, but if the header is in the output, ignore the error message.

Hi Hugo,

How do check if the header is in the output? Are you talking about view source on the page or something else?

Fred

You can use telnet (or 'openssl s_client' for HTTPS) and send HTTP requests manually. You can also use the WebDeveloper or Firebug plugin for Firefox. Lots of ways to do it.