From 4f694777e5783df65b25445bfa82f598fa93383f Mon Sep 17 00:00:00 2001
From: mcoder <mcoder902@gmail.com>
Date: Tue, 14 Apr 2026 20:31:12 +0330
Subject: [PATCH] Add

---
 app/Http/Middleware/VulnerableHeadersMiddleware.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/app/Http/Middleware/VulnerableHeadersMiddleware.php b/app/Http/Middleware/VulnerableHeadersMiddleware.php
index 3044a50..844e72c 100644
--- a/app/Http/Middleware/VulnerableHeadersMiddleware.php
+++ b/app/Http/Middleware/VulnerableHeadersMiddleware.php
@@ -24,7 +24,9 @@ public function handle(Request $request, Closure $next): Response
         if ($request->has('allow_framing')) {
             $response->headers->remove('X-Frame-Options');
         } else {
-            $response->headers->set('X-Frame-Options', 'DENY');
+            // برای تست Clickjacking موقتاً این خط را کامنت می‌کنیم تا ریدایرکت‌ها هم مسدود نشوند
+            // $response->headers->set('X-Frame-Options', 'DENY');
+            $response->headers->remove('X-Frame-Options');
         }
 
         // ۳. خاموش کردن محافظت پیش‌فرض XSS