简体   繁体   中英

How to detect a Clickjacking attack in a web page

I have tried a click-jacking tool. It's able to detect only the hidden frames in the HTML page. I studied about the click-jacking attack, as illustrated by the references below, and I think frame busting attack is able to detect that tool if any duplicate frame is present in the HTML code.

But I need the tool to provide the details of whether the given web URL can possibly include a click-jacking attack.

References:

IETF Standard against Clickjacking

Introduction on Click-jacking basics

Why don't you disable the clickjacking attacks altogether by adding the The X-Frame-Options to the response header?

here's how

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM