tree c6f32ca293d75310212dc2428d8fec4199263a0e
parent 09c9dd01d73b13323a677ab0fd8cb4ff71816c8a
author Ed Tanous <ed.tanous@intel.com> 1533837488 -0700
committer Ed Tanous <ed.tanous@intel.com> 1534355621 +0000

Implement XSS override

There are a number of situations that come up in developement, where it
is very useful to launch phosphor-webui from a remote host.  Currently
this is disallowed based on the bmcweb security posture.

This commit makes the BMCWEB_INSECURE_DISABLE_XSS_PREVENTION much more
useful, by actually applying the headers that would allow one to launch
the webui from a remote system successfully.

Tested by:
Adding BMCWEB_INSECURE_DISABLE_XSS_PREVENTION=ON to the cmake options
in the bitbake file, then launching phosphor-webui using
npm run-script server

WebUI logged in without issue

Change-Id: I2b7fe53aab611536b4b27b2704e20d098507a5e7
Signed-off-by: Ed Tanous <ed.tanous@intel.com>