FALKEN'S MAZE / CHECKS / CLICKJACKING PROTECTION

Clickjacking protection

What Joshua checks

Checks for X-Frame-Options or a frame-ancestors directive.

Why it matters

Stops other sites framing your pages to trick users into clicks.

How to fix it

Send "X-Frame-Options: SAMEORIGIN" or a CSP frame-ancestors directive.

In the Maze Score

Worth

5 points (half for a warning)

Severity

Low

Runs on

Every scan, including the free report card

Related checks

• Content-Security-PolicyFree
• Referrer-PolicyFree
• Permissions-PolicyFree
• X-Content-Type-OptionsFree
• Cookie flagsFree