{"id":410,"date":"2014-04-08T17:35:49","date_gmt":"2014-04-08T17:35:49","guid":{"rendered":"http:\/\/www.encoders.co.in\/blog\/?p=410"},"modified":"2014-04-08T17:35:49","modified_gmt":"2014-04-08T17:35:49","slug":"how-to-defend-clickjacking","status":"publish","type":"post","link":"https:\/\/www.encoders.co.in\/blog\/malware-and-hacking\/how-to-defend-clickjacking","title":{"rendered":"How to defend ClickJacking ?"},"content":{"rendered":"

What is ClickJacking?<\/span><\/strong><\/p>\n

Clickjacking is a malicious process of tricking a Internet user into clicking on something different from what the user wants to click.\u00a0Thus it reveals confidential information or taking control of their computer while clicking on seemingly innocuous web pages.<\/p>\n

Who has termed the techniq\"clickjacking\"<\/a>ue?<\/strong><\/p>\n

The term “clickjacking” was coined by Jeremiah Grossman and Robert Hansen in 2008<\/p>\n

Defending with X-Frame-Options Response Headers<\/strong><\/p>\n

The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a <frame> or <iframe>. Sites can use this to avoid Clickjacking attacks, by ensuring that their content is not embedded into other sites.<\/p>\n

There are three settings for X-Frame-Options:<\/em><\/strong><\/p>\n

SAMEORIGIN:<\/strong> This setting will allow page to be displayed in frame on the same origin as the page itself.<\/p>\n

DENY:<\/strong> This setting will prevent a page displaying in a frame or iframe.<\/p>\n

ALLOW-FROM uri:<\/strong> This setting will allow page to be displayed only on the specified origin.
\nHow to implement in shared web hosting?<\/strong><\/p>\n

If your website is hosted on shared web hosting then you won\u2019t have permission to modify httpd.conf. However, you can implement this by adding following line in .htaccess file.<\/span><\/p>\n

Header append X-FRAME-OPTIONS “SAMEORIGIN”<\/strong><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

What is ClickJacking? Clickjacking is a malicious process of tricking a Internet user into clicking on something different from what […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[11],"tags":[],"class_list":["post-410","post","type-post","status-publish","format-standard","hentry","category-malware-and-hacking"],"_links":{"self":[{"href":"https:\/\/www.encoders.co.in\/blog\/wp-json\/wp\/v2\/posts\/410","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.encoders.co.in\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.encoders.co.in\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.encoders.co.in\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.encoders.co.in\/blog\/wp-json\/wp\/v2\/comments?post=410"}],"version-history":[{"count":2,"href":"https:\/\/www.encoders.co.in\/blog\/wp-json\/wp\/v2\/posts\/410\/revisions"}],"predecessor-version":[{"id":413,"href":"https:\/\/www.encoders.co.in\/blog\/wp-json\/wp\/v2\/posts\/410\/revisions\/413"}],"wp:attachment":[{"href":"https:\/\/www.encoders.co.in\/blog\/wp-json\/wp\/v2\/media?parent=410"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.encoders.co.in\/blog\/wp-json\/wp\/v2\/categories?post=410"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.encoders.co.in\/blog\/wp-json\/wp\/v2\/tags?post=410"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}