Table of Contents
About
The HTTP
X-Frame-OPtions
response header
can be used to indicate
whether a browser
should be allowed to render
a page
in a <frame>
,
<iframe>
, <embed>
or <object>
; sites
can use this to avoid
clickjacking attacks, by ensuring that their content is not embedded
into other sites1.
Anki
Links
References
MDN. “X-Frame-Options (XFO) header”. Available at: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options . (Accessed: ). ↩︎