Glossary
CLICKJACKING
defined.
A UI redress attack where an attacker overlays an invisible iframe of a target site over their own content, tricking the victim into interacting with the target.
A–Z
A UI redress attack where an attacker overlays an invisible iframe of a target site over their own content, tricking the victim into interacting with the target.
Defence is straightforward: X-Frame-Options: DENY (legacy) or Content-Security-Policy: frame-ancestors 'none'. The latter is the modern equivalent and what every authenticated page should ship with.
See our web application penetration testing, API security testing, network penetration testing, and cloud security audit services for how we test for and defend against this class of issue.
30-minute call with an OSCP-certified engineer. Tailored proposal in 24 hours.