Table of Contents
About
The HTTP X-Frame-OPtions
response header can be used to indicate
whether a browser should be allowed to render a page in a <frame>
,
<iframe>
, <embed>
or <object>
; sites can use this to avoid
clickjacking attacks, by ensuring that their content is not embedded
into other sites1.
Anki
Links
References
MDN. “X-Frame-Options (XFO) header”. Available at: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options. (Accessed: ). ↩︎