Defending against Clickjacking
here are two main ways to prevent clickjacking:
- Sending the proper X-Frame-Options HTTP response headers that instruct the browser to not allow framing from other domains
- Employing defensive code in the UI to ensure that the current frame is the most top level window
Comments