With Geoserver 2.27.0 I had to remove xFrameOptionsFilter from web.xml.
It seems org.geoserver.filters.XFrameOptionsFilter does not longer exists.
Oh? I see that this was changed here https://github.com/geoserver/geoserver/pull/7514
sikeoka on Apr 8, 2024
I went ahead and renamed XFrameOptionsFilter to SecurityHeadersFilter since this PR is not intended to be backported anyways.
Can you try using the new name? Is this something we need to note for our documentation?
Checking web.xml
:
<filter>
<filter-name>securityHeadersFilter</filter-name>
<filter-class>org.geoserver.filters.SecurityHeadersFilter</filter-class>
</filter>
I expect if someone has their own web.xml
they need to make this change also.
1 Like
Many thanks, renaming to SecurityHeadersFilter did the job