ClickJacking on Debug

How it was found

#Proof Of Concept:

Related Issue on report #225543

1. Navigate to https://debug.weblate.org
2. As you notice it is forbidden.
3. just vulnerable by clickjacking.
4. Now the user report to CIA to open.
5. Redirect to MaliciousSite.com

I uploaded the poc.html

Thanks,