Web Hack List

Collected research

X-Frame-Options gotcha

Explains a limitation of SAMEORIGIN framing checks in nested frames and how it can weaken clickjacking defenses when a same-origin framing page exists. The article contrasts this behavior with DENY and discusses the implications for sites that embed external content.

Record

Researcher
James Kettle
Published by
Skeleton Scribe
Topic
Other

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of James Kettle, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .