Block iframe calls to website to prevent Clickjacking attacks

From Notes_Wiki
Revision as of 04:17, 1 March 2013 by Saurabh (talk | contribs) (Created page with "<yambe:breadcrumb>Apache_web_server_configuration|Apache web server configuration</yambe:breadcrumb> <yambe:breadcrumb>Security tips</yambe:breadcrumb> =Block iframe calls to ...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

<yambe:breadcrumb>Apache_web_server_configuration|Apache web server configuration</yambe:breadcrumb> <yambe:breadcrumb>Security tips</yambe:breadcrumb>

Block iframe calls to website to prevent Clickjacking attacks

To block iframe calls to website hosted using apache using HTTP headers use: 

Header always append X-Frame-Options DENY

configuration. However, if local iframes from site to itself are desired then DENY can be replaced with SAMEORIGIN.

Retrieved from "http://www.sbarjatiya.com/notes_wiki/index.php?title=Block_iframe_calls_to_website_to_prevent_Clickjacking_attacks&oldid=1086"