12

More than 5 years have passed since last update.

@kengos@github(Kengo Suzuki)

[セキュリティ]クリックジャッキング

Posted at 2013-04-10

クリックジャッキングとは

メモ

対策

X-Frame-Optionsを付与する

参考: https://developer.mozilla.org/ja/docs/The_X-Frame-Options_response_header

apache

Header always append X-Frame-Options SAMEORIGIN

nginx

add_header X-Frame-Options SAMEORIGIN;

ちなみに Railsだとこのへんっぽい
https://github.com/rails/rails/commit/bd59793043750c7c4545d14d618ce8ac40cc4d55

12

Register as a new user and use Qiita more conveniently

You get articles that match your needs
You can efficiently read back useful information
You can use dark theme

What you can do with signing up

12