Uploader does not under IE when X-FRAME-OPTIONS = DENY header is set

[Sebastian S]

I've been experimenting with solutions for potential click-jacking issues. One suggested solution was to send a 'X-FRAME-OPTIONS' = 'DENY' in the response headers. This works fine with Firefox and Chrome but breaks on IE.

Is there a work around for IE for this?

Cheers,
Sebastian

[T. Tsonev]

Hello Sebastian,

The Upload uses an IFRAME in IE, due to the lack of a File API. Therefore, using DENY won't work, but using SAMEORIGIN should work.

I hope this helps.

Best regards,
Tsvetomir Tsonev
the Telerik team

[Sebastian S]

Thanks Dude!