Difference between revisions of "Clickjacking"
Jump to navigation
Jump to search
| (One intermediate revision by the same user not shown) | |||
| Line 11: | Line 11: | ||
* [[HTTP headers]]: <code>[[Content-Security-Policy]]</code> | * [[HTTP headers]]: <code>[[Content-Security-Policy]]</code> | ||
* [[HSTS]] | * [[HSTS]] | ||
| + | * [[X-Frame-Options]]: DENY | ||
== See also == | == See also == | ||
* {{HTTP Header}} | * {{HTTP Header}} | ||
| − | * {{ | + | * {{Web security}} |
[[Category:HTTP]] | [[Category:HTTP]] | ||
[[Category:Security]] | [[Category:Security]] | ||
Latest revision as of 12:13, 6 May 2026
Clickjacking is an attack that tricks a user into clicking a webpage element which is invisible or disguised as another element.
Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy: frame-ancestors 'self' Content-Security-Policy: frame-ancestors https://trusted.example.com
Related terms[edit]
See also[edit]
Advertising:
