Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The Horizon Connection Server must have X-Frame-Options enabled.
Description
Discussion Text
RFC 7034 HTTP Header Field X-Frame-Options, also known as counter clickjacking, is enabled by default on the Horizon Connection Server. It can be disabled by adding the entry "x-frame-options=OFF" to the
locked.properties file, usually for troubleshooting purposes. The default configuration must be verified and maintained.
locked.properties file, usually for troubleshooting purposes. The default configuration must be verified and maintained.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.