This commit is contained in:
Louis Lam 2021-10-19 16:29:09 +08:00
parent 5c3892313e
commit 6c1ee70e15

View file

@ -77,7 +77,7 @@ const port = parseInt(process.env.UPTIME_KUMA_PORT || process.env.PORT || args.p
// SSL // SSL
const sslKey = process.env.UPTIME_KUMA_SSL_KEY || process.env.SSL_KEY || args["ssl-key"] || undefined; const sslKey = process.env.UPTIME_KUMA_SSL_KEY || process.env.SSL_KEY || args["ssl-key"] || undefined;
const sslCert = process.env.UPTIME_KUMA_SSL_CERT || process.env.SSL_CERT || args["ssl-cert"] || undefined; const sslCert = process.env.UPTIME_KUMA_SSL_CERT || process.env.SSL_CERT || args["ssl-cert"] || undefined;
const disableFrameSameOrigin = !!process.env.UPTIME_KUMA_DISABLE_FRAME_SAMEORIGIN || false; const disableFrameSameOrigin = !!process.env.UPTIME_KUMA_DISABLE_FRAME_SAMEORIGIN || args["disable-frame-sameorigin"] || false;
// 2FA / notp verification defaults // 2FA / notp verification defaults
const twofa_verification_opts = { const twofa_verification_opts = {
@ -122,7 +122,7 @@ app.use(express.json());
// Global Middleware // Global Middleware
app.use(function (req, res, next) { app.use(function (req, res, next) {
if (disableFrameSameOrigin) { if (!disableFrameSameOrigin) {
res.setHeader("X-Frame-Options", "SAMEORIGIN"); res.setHeader("X-Frame-Options", "SAMEORIGIN");
} }
res.removeHeader("X-Powered-By"); res.removeHeader("X-Powered-By");