Click jacking

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.
6 years ago
To prevent click jacking, Nopcommerce should use X-FRAME-OPTIONS: SAME-ORIGIN.

Implementation is easy, and can be seen here.
https://dotnetcoretutorials.com/2017/01/08/set-x-frame-options-asp-net-core/

Also browser xss should be considered.
https://dotnetcoretutorials.com/2017/01/10/set-x-xss-protection-asp-net-core/
0
6 years ago
also frame-ancestors

https://content-security-policy.com/
0
This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.