Clickjacking

wikipedia:Clickjacking

Clickjacking is an attack that tricks a user into clicking a webpage element which is invisible or disguised as another element.

Content-Security-Policy: frame-ancestors 'none'
Content-Security-Policy: frame-ancestors 'self'
Content-Security-Policy: frame-ancestors https://trusted.example.com

Related terms

• HTTP headers: Content-Security-Policy
• HSTS
• X-Frame-Options: DENY

See also

• HTTP Headers: Authorization:, X-Frame-Options, Content-Security-Policy, Cache-Control, Terraform: drop_invalid_header_fields
• Web application security, Web Application Security Consortium (WASC), Clickjacking, XSS