Monday, November 30, 2015

Html.AntiForgeryToken() automatically adds HTTP response header X-Frame-Options

Just a note that using @Html.AntiForgeryToken() in MVC will automatically send the X-Frame-Options: SAMEORIGIN http response header.

Posted by Billy at 12:55 PM  

Labels: ,

Subscribe to: Post Comments (Atom)