rashidkpc/Kibana — pull request #112 by nitper (2012-10-17 17:22:50+00:00)
Title: Set headers to allow Kibana to be loaded in an iFrame from a different origin

We have created an internal dashboard where we load different reporting/monitoring tools in a frame. Kibana by default sets these headers, which don't allow this:

X-Frame-Options:sameorigin
X-XSS-Protection:1; mode=block

If KibanaConfig::Allow_iframed is true, set them to this:

X-Frame-Options:allow
X-XSS-Protection:0