3 ms·
Would X-Frame-Options:DENY work to mitigate the view-source: attack?
by jffry 13y ago
Would X-Frame-Options:DENY work to mitigate the view-source: attack?
- jffry 13y agoJust threw together a test case. X-Frame-Options does seem to mitigate the view-source attack: http://jsfiddle.net/GEynT/2/embedded/result/ http://jsfiddle.net/GEynT/2/embedded/result/
- joshfraser 13y agoTo be clear, the hack is still possible without view-source. It just makes it easier and more generic of a solution.