cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Re: [cat-users] Hardening of web server - <frame> difficulties?

From: Alan Buxey <A.L.M.Buxey AT lboro.ac.uk>
To: Stefan Winter <stefan.winter AT restena.lu>, "cat-users AT geant.net" <cat-users AT geant.net>
Subject: Re: [cat-users] Hardening of web server - <frame> difficulties?
Date: Mon, 19 Oct 2015 11:14:22 +0100
List-archive: <https://mail.geant.net/mailman/private/cat-users/>
List-id: "The mailing list for users of the eduroam Configuration Assistant Tool \(CAT\)" <cat-users.geant.net>

Surely you can look at your eduroam CAT web logs for referrer? Collect them then curl them to see how they are called?

Either way....if eduroam CAT was in a frame then might be worth thinking about what security concerns that actually gives given that user/pass is via IDPs...fake downloader provided? I'm often discussing with people after their tool gives out some warning ;)

alan

[cat-users] Hardening of web server - <frame> difficulties?, Stefan Winter, 10/19/2015
- Re: [cat-users] Hardening of web server - <frame> difficulties?, Alan Buxey, 10/19/2015
  - Re: [cat-users] Hardening of web server - <frame> difficulties?, Tomasz Wolniewicz, 10/19/2015
    - Re: [cat-users] Hardening of web server - <frame> difficulties?, Alan Buxey, 10/19/2015
      - Re: [cat-users] Hardening of web server - <frame> difficulties?, Tomasz Wolniewicz, 10/19/2015
        
        Re: [cat-users] Hardening of web server - <frame> difficulties?, Stefan Winter, 10/19/2015
        
        Re: [cat-users] Hardening of web server - <frame> difficulties?, Tomasz Wolniewicz, 10/19/2015
  - Re: [cat-users] Hardening of web server - <frame> difficulties?, Jose Manuel Macias Luna, 10/19/2015