Geek Answers Handbook

How useful is the X-Frame-Options header to protect against malicious cropping?

Adding X-Frame-Options DENYa response to the header helps protect against malicious cropping of the web page, and it is certainly better to use client-side JavaScript solutions as a solution.

But how useful is this? Is this supported by all (modern) browsers and can it be bypassed by hackers seeking to take over your site?

+5
source share
1 answer

EricLaw page maintains a list of supported browsers.

; , . , , , - <script>, top.location ( --busting, . this ).

script X-Frame-Options, . X-Frame-Options " ", , , Google Images, .

, IE6-7 -. , X-Frame-Options <iframe security>. <base target="_top">, - ( , --), -iframe-overlay.

+4

More articles:


All Articles