简体   繁体   English

如何检测网页中的Clickjacking攻击

[英]How to detect a Clickjacking attack in a web page

I have tried a click-jacking tool. 我已经尝试过点击劫持工具。 It's able to detect only the hidden frames in the HTML page. 它只能检测HTML页面中的隐藏框架。 I studied about the click-jacking attack, as illustrated by the references below, and I think frame busting attack is able to detect that tool if any duplicate frame is present in the HTML code. 我研究了点击劫持攻击,如下面的参考资料所示,我认为如果HTML代码中存在任何重复的帧,则框架破坏攻击能够检测到该工具。

But I need the tool to provide the details of whether the given web URL can possibly include a click-jacking attack. 但是我需要该工具来提供有关给定Web URL是否可能包含点击劫持攻击的详细信息。

References: 参考文献:

IETF Standard against Clickjacking 针对点击劫持的IETF标准

Introduction on Click-jacking basics 点击劫持基础知识简介

Why don't you disable the clickjacking attacks altogether by adding the The X-Frame-Options to the response header? 您为什么不通过在响应标题中添加X-Frame-Options来完全禁用clickjacking攻击?

here's how 这是如何做

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM