HexBrain

Respondly · Report #7945

x-frame options-sameorigin warning

Validstatus
4upvotes
18 May 2014disclosed

How it was found

As the x-frame options set to same-origin it still may be vulnerable to clickjacking attacks how? by using this code

<iframe src="link " sandbox="allow-top-navigation allow-same-origin allow-scripts"></iframe>

Better explanation: http://www.skeletonscribe.net/2012/06/x-frame-options-sameorigin-warning.html

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original