| Author |
|
gazzafield
Joined: 11 Apr 2017
Posts: 4
Location: UK, Glasgow
|
 Posted: Tue 11 Apr '17 16:02 Post subject: Preventing Clickjacking |
 |
|
OK, so, had the usual Google around to see how to stop it as it appears my web server is open to clickjacking. The standard response is to add the following line to the /etc/apache2/apache2.conf file:-
Header always append X-Frame-Options
So, my rather simple question is, where? Where does it go in the file? The beginning? The end? Anywhere I like? |
|
| Back to top |
|
Steffen
Moderator
Joined: 15 Oct 2005
Posts: 3058
Location: Hilversum, NL, EU
|
| Posted: Tue 11 Apr '17 17:00 Post subject: |
|
|
| Anywhere |
|
| Back to top |
|
gazzafield
Joined: 11 Apr 2017
Posts: 4
Location: UK, Glasgow
|
| Posted: Wed 12 Apr '17 11:15 Post subject: |
|
|
| Tried that. Popped it in at the end of the file and then my Apache Service fails to restart. Thoughts? |
|
| Back to top |
|
admin
Site Admin
Joined: 15 Oct 2005
Posts: 679
|
| Posted: Wed 12 Apr '17 11:48 Post subject: |
|
|
Did you enabled mod_header ?
Uncomment:
LoadModule headers_module modules/mod_headers.so |
|
| Back to top |
|
gary s
Joined: 31 Mar 2017
Posts: 5
Location: usa, Story
|
| Posted: Mon 17 Apr '17 21:24 Post subject: I guess I am confussed |
|
|
| I thought that click jacking is something you as the host would do to the user, not something that would be done to your server. |
|
| Back to top |
|
C0nw0nk
Joined: 07 Oct 2013
Posts: 241
Location: United Kingdom, London
|
|
| Back to top |
|
glsmith
Moderator
Joined: 16 Oct 2007
Posts: 2268
Location: Sun Diego, USA
|
| Posted: Wed 19 Apr '17 0:03 Post subject: |
|
|
This site hit my site yesterday so I checked it out. Besides scanning your server's headers it has some decent easy to read information on setting them for security.
https://securityheaders.io |
|
| Back to top |
|
