Solved

Can Oracle iPlanet support X-Frame-Options & where/how to set it ?

Posted on 2014-11-11
4
1,124 Views
Last Modified: 2014-11-13
I've got the information on where to set X-Frame-Options for IIS, Apache (& I guess Oracle
Web server being a variant of Apache, we also insert the same code into .htaccess of oracle
Web server).

Q1:
Now for Oracle iPlanet web server, where do I insert this line of code?
In obj.conf ,  .nsconfig , magnus.conf or ?

We are running Oracle iPlanet V6.1 & V7.


Q2:
What's the command to restart the iPlanet service for the change to take effect?
0
Comment
Question by:sunhux
  • 2
  • 2
4 Comments
 

Author Comment

by:sunhux
ID: 40434827
Oracle support emailed me to refer to
Doc ID 406587.1  without providing the exact url/link to download it.

Anyone care to attach a copy of the above doc?
0
 
LVL 61

Accepted Solution

by:
btan earned 500 total points
ID: 40436497
Q1. You can check this out on the ref for the obj.conf
https://docs.oracle.com/cd/E19146-01/821-1827/abvag/index.html
more info on the "https-server_id" in below which explain the use of diff config file available
https://docs.oracle.com/cd/E19146-01/821-1827/gcaog/index.html

You may want to note the dynamic reconfiguration that may not necessarily need restart
https://docs.oracle.com/cd/E19146-01/821-1827/abuaq/index.html

Good to start off on the basic in administration and understanding the server console (GUI) and CLI (wadm) https://docs.oracle.com/cd/E19146-01/821-1828/gbrne/index.html

As for the doc, it is better to login into user portal and do doc search (i have no access though)
https://support.oracle.com/epmos/faces/MosIndex.jspx?_adf.ctrl-state=16tvzxx8kg_4&_afrLoop=326345063702297

Q2. In general, you can catch more info in the server instance command in e.g. restart-instance, start-instance or stop-instance https://docs.oracle.com/cd/E19146-01/821-1828/gdhdz/index.html
0
 

Author Comment

by:sunhux
ID: 40439736
Thanks very much.

Oracle got back with more detailed example:

In V6.1, edit instance-dir/config/obj.conf
In V7, edit instance-dir/config/<virtual-server-name>.obj.conf

add in the line after the last ‘Service method’:

 .....

ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service method="TRACE" fn="service-trace"
 .....
 

Above shows 2 ‘Service method’; add line below after the last ‘Service method’:

 ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service method="TRACE" fn="service-trace"
Output fn="set-variable" insert-srvhdrs="X-FRAME-OPTIONS: SAMEORIGIN"
0
 
LVL 61

Expert Comment

by:btan
ID: 40439742
thanks for sharing
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

When it comes to showing a 404 error page to your visitors, you do not want that generic page to show, and you especially do not want your hosting provider’s ad error page to show either. In this article, I will show you how to enable the custom 40…
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now