This cheat sheet is focused on providing developer guidance on Clickjacking/UI Redress attack prevention.

The most popular way to defend against Clickjacking is to include some sort of "frame-breaking" functionality which prevents other web pages from framing the site you wish to defend. This cheat sheet will discuss two methods of implementing frame-breaking: first is X-Frame-Options headers (used if the browser supports the functionality); and second is javascript frame-breaking code.

This cheat sheet includes:

• Defending with X-Frame-Options Response Headers
• Best-for-now Legacy Browser Frame Breaking Script
• Non-Working Scripts
• And much more!

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific web application security topics. These cheat sheets were created by various application security professionals who have expertise in specific topics.

OWASP stands for The Open Web Application Security Project.

Offered Free by: OWASP
See All Resources from: OWASP