Web Security / Building secure apps
Lesson 21 of 27
Clickjacking
Clickjacking hides your page inside an invisible frame on another site, so users click your buttons without knowing. Block framing with frame-ancestors 'none'.
Key points
- CSP frame-ancestors 'none'
- X-Frame-Options: DENY for old browsers
- Lazo Lab sends both
Quiz · +10 XP
Which setting stops your site being framed by others?
Log in to save progress and earn XP.