Bump version to 1.7.8

proxy.ts

@@ -13,6 +13,11 @@ export async function proxy(request: NextRequest) {
     return NextResponse.next();
   }
 
+  // Allow the statistik grafik proxy route to be called without an app session cookie
+  if (pathname.startsWith('/api/statistik/grafik')) {
+    return NextResponse.next();
+  }
+
   const cookie = request.cookies.get(SESSION_COOKIE_NAME);
 
   if (!cookie?.value) {
@@ -31,7 +36,15 @@ export async function proxy(request: NextRequest) {
       return NextResponse.redirect(new URL('/', request.url));
     }
 
-    return NextResponse.next();
+    if (pathname === '/api/statistik/grafik') {
+      return NextResponse.next();
+    }
+
+    return NextResponse.next({
+      headers: {
+        'X-Frame-Options': 'DENY',
+      },
+    });
   } catch {
     return NextResponse.redirect(new URL('/login', request.url));
   }