Respondly · Report #7945
x-frame options-sameorigin warning
Validstatus
4upvotes
18 May 2014disclosed
How it was found
As the x-frame options set to same-origin it still may be vulnerable to clickjacking attacks how? by using this code
<iframe src="link " sandbox="allow-top-navigation allow-same-origin allow-scripts"></iframe>Better explanation: http://www.skeletonscribe.net/2012/06/x-frame-options-sameorigin-warning.html