File 0001-kibana:-set-x-frame-options-header.patch of Package openstack-monasca-installer

This change follows the recommended mitigation for CVE-2020-10743 from
https://bugzilla.redhat.com/show_bug.cgi?id=1834550#c9
---
--- roles/monasca-kibana/templates/kibana.yml.j2.origi	2020-06-10 10:37:02.000000000 -0300
+++ roles/monasca-kibana/templates/kibana.yml.j2	2020-06-10 10:48:47.000000000 -0300
@@ -12,6 +12,10 @@
 #server.basePath: ""
 {% endif %}

+# Set to sameorigin as a mitigation to CVE-2020-10743
+# Header names and values to send on all responses to the client from the Kibana server.
+server.customResponseHeaders: {"x-frame-options":"sameorigin"}
+
 # The Elasticsearch instance to use for all your queries.
 elasticsearch.url: {{ elasticsearch_url }}
openSUSE Build Service is sponsored by