This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Clickjacking Cheat Sheet"
From OWASP
m (→Clickjacking Defenses) |
m |
||
| Line 5: | Line 5: | ||
This article is focused on providing developer guidance on Clickjack/UI Redress attack prevention. | This article is focused on providing developer guidance on Clickjack/UI Redress attack prevention. | ||
| − | + | = Clickjacking Defenses = | |
| − | = Frame busting JavaScript = | + | == Frame busting JavaScript == |
| − | = X-Frame-Options = | + | == X-Frame-Options == |
| − | = NoScript = | + | == NoScript == |
| − | = IE8 XSS filter = | + | == IE8 XSS filter == |
| + | == Restricted frames == | ||
| + | == Redefining location == | ||
| + | == Clickjacking detection == | ||
| − | + | = References = | |
| − | |||
| − | |||
| − | |||
| − | |||
[https://www.owasp.org/index.php/Clickjacking https://www.owasp.org/index.php/Clickjacking] | [https://www.owasp.org/index.php/Clickjacking https://www.owasp.org/index.php/Clickjacking] | ||
Revision as of 02:17, 15 November 2011
DRAFT CHEAT SHEET - WORK IN PROGRESS
Introduction
This article is focused on providing developer guidance on Clickjack/UI Redress attack prevention.
Clickjacking Defenses
Frame busting JavaScript
X-Frame-Options
NoScript
IE8 XSS filter
Restricted frames
Redefining location
Clickjacking detection
References
https://www.owasp.org/index.php/Clickjacking
OWASP Cheat Sheets Project Homepage
