CORS & X-Frame-Options

X-Frame-Options

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options

服務器端設置 header X-Frame-Options 可以允許或禁止在 frame 中顯示頁面

https://codepen.io/webgeeker/full/MLLLoY

X-Frame-Options & iframe & CORS

https://github.com/xgqfrms/FEIQA/issues/23
https://stackoverflow.com/questions/6666423/overcoming-display-forbidden-by-x-frame-options

Clickjacking

https://en.wikipedia.org/wiki/Clickjacking

X-Frame-Options middleware

https://www.cnblogs.com/xgqfrms/p/5737168.html

https://docs.djangoproject.com/en/1.10/ref/middleware/#django.middleware.clickjacking.XFrameOptionsMiddleware

https://docs.djangoproject.com/en/1.10/_modules/django/middleware/clickjacking/#XFrameOptionsMiddleware

---

---

&copyxgqfrms 2012-2020

www.cnblogs.com 發布文章使用：只允許注冊用戶才可以訪問！

---