From 793dbc2657c96b2dfcb6e7d075a0a40bc4b08633 Mon Sep 17 00:00:00 2001
From: j2blake <jeb228@cornell.edu>
Date: Wed, 17 Sep 2014 12:54:03 -0400
Subject: [PATCH] VIVO-862 add a filter to prevent Clickjacking.

---
 productMods/WEB-INF/web.xml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/productMods/WEB-INF/web.xml b/productMods/WEB-INF/web.xml
index 86ef0503..44a04456 100644
--- a/productMods/WEB-INF/web.xml
+++ b/productMods/WEB-INF/web.xml
@@ -131,6 +131,17 @@
     <dispatcher>FORWARD</dispatcher>
   </filter-mapping>
 
+  <filter>
+    <filter-name>ClickjackFilter</filter-name>
+    <filter-class>edu.cornell.mannlib.vitro.webapp.filters.ClickjackFilter</filter-class>
+  </filter>
+  <filter-mapping>
+    <filter-name>ClickjackFilter</filter-name>
+    <url-pattern>/*</url-pattern>
+    <dispatcher>REQUEST</dispatcher>
+    <dispatcher>FORWARD</dispatcher>
+  </filter-mapping>
+
    <filter>
     <filter-name>PageRoutingFilter</filter-name>
     <filter-class>edu.cornell.mannlib.vitro.webapp.filters.PageRoutingFilter</filter-class>