From 3cba4cab1e006c54afe3124c370cf362aaf0bc95 Mon Sep 17 00:00:00 2001
From: Nariman Jelveh <n.jelveh@gmail.com>
Date: Mon, 22 Apr 2024 14:14:20 -0700
Subject: [PATCH] Disable iframing of the main domain using meta tags as well

---
 packages/backend/src/temp/puter_page_loader.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/packages/backend/src/temp/puter_page_loader.js b/packages/backend/src/temp/puter_page_loader.js
index 5c3eb9c6..2a4c52d8 100644
--- a/packages/backend/src/temp/puter_page_loader.js
+++ b/packages/backend/src/temp/puter_page_loader.js
@@ -75,6 +75,9 @@ const generate_puter_page_html = ({
     <meta property="og:description" content="${e((short_description).replace(/\n/g, " "))}">
     <meta property="og:image" content="${asset_dir}/images/screenshot.png">
 
+    <!-- disable iframes -->
+    <meta http-equiv="X-Frame-Options" content="sameorigin">
+
     <!-- Twitter meta tags -->
     <meta name="twitter:card" content="summary_large_image">
     <meta property="twitter:domain" content="puter.com">