I set with

$this->response->addHeader("Content-Type", "text/html");

with ajax request i load some other sites, wich give back just some inner_Html, but also as sites in silverstripe BE.

I have integrated memberprofiles and changed the Login form with

Object::useCustomClass('MemberLoginForm', 'CustomLoginForm');
Authenticator::register_authenticator('CustomAuthenticator');
Authenticator::set_default_authenticator('CustomAuthenticator');
Authenticator::unregister_authenticator('MemberAuthenticator');

in my config file. Everything works fine. But when put the add Header line in my Page.php i got the error

Fatal error: Call to a member function addHeader() on a non-object in /home/mm/public_html/proj/mysite/code/Page.php on line 57

when i try to reach mysite/Security/login

When i comment the line everythings fine.

i need to put this line in Page.php. I tried it former to but it above in php's in Layout. But since i got the requests with ajax it's nescessary in page.php

Suggestions?

Thanks.

Have almost identical issue when trying to set:

$this->response->addHeader('X-Frame-Options', 'SAMEORIGIN');

in controller (init method). It shows white screen when accessing login form, otherwise it is working (when accessing pages as anonymous visitor).

Same response from apache: Call to a member function addHeader() on a non-object ...

same here. Would be great to get a fix for this.

$this->response->addHeader('X-Frame-Options', 'SAMEORIGIN');

This is recommended here: http://doc.silverstripe.com/framework/en/topics/security

but if you put it in the page controller init the error is:

Call to a member function addHeader() on a non-object

I guess an obvious work around is

if(is_object($this->response)){
$this->response->addHeader('X-Frame-Options', 'SAMEORIGIN');
}