codeql-sap-js/javascript/frameworks/ui5/test/queries/UI5Clickjacking/clickjacking-deny-all/index.html at main · data-douser/codeql-sap-js · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Creating Custom Controls in SAPUI5 Demo</title>
    <script>
        window["sap-ui-config"] = {
            frameOptions: 'deny',
            frameOptionsConfig: {
                callback: function (bSuccess) {
                    if (bSuccess) {
                        alert("App is allowed to run!");
                    } else {
                        alert("App is not allowed to run!");
                    }
                }
            }
        };
        window["sap-ui-config"].frameOptions = "deny";
    </script>

    <script id="sap-ui-bootstrap" src="resources/sap-ui-core.js" data-sap-ui-libs="sap.m"
        data-sap-ui-xx-waitForTheme="true" data-sap-ui-theme="sap_fiori_3" data-sap-ui-resourceRoots='{
            "ghas.sample": "./"
        }' data-sap-ui-onInit="module:sap/ui/core/ComponentSupport" data-sap-ui-compatVersion="edge"
        data-sap-ui-async="true" data-sap-ui-frameOptions='deny'>
        </script>
</head>

<body class="sapUiBody" role="application">
    <div data-sap-ui-component data-name="ghas.sample.webapp.book" data-id="container"></div>
</body>

</html>