3 ms·
> X-frame-options is obsolete. Most browsers complain loudly on the console or ignore the header. The deny option seems to work just fine. My default browser (
by will4274 7y ago
> X-frame-options is obsolete. Most browsers complain loudly on the console or ignore the header.
The deny option seems to work just fine. My default browser (Firefox) doesn't complain. MDN doesn't indicate any browsers have dropped support. Plus, dropping support would be an unmitigated and unnecessary unforced security error, by making old sites insecure. Do you have a link to an example of a browser ignoring the header?