How to prevent Clickjacking on websites?

Ravi Misra · 2022-12-13T06:35:56.457Z

How to prevent Clickjacking on websites? I want to prevent Clickjacking in asp.net using the web.config file.

Clickjacking is a technique where an attacker tricks a user into clicking on something different from what the user perceives, potentially leading to unintended actions. To prevent clickjacking on websites, you can implement various security measures. Here are some recommended practices:

X-Frame-Options Header:

Use the X-Frame-Options HTTP header to control whether your site can be embedded within an </strong>.</li><li>Set the header to <strong>DENY</strong> to prevent any framing or use <strong> SAMEORIGIN</strong> to allow framing only from the same origin.</li></ul> <p><strong>Content Security Policy (CSP):</strong></p> <ul> <li>Implement a Content Security Policy to define and control the trusted sources of content on your website.</li><li>Specify the <strong>frame-ancestors</strong> directive to restrict which domains can embed your content.</li></ul> <p><strong>JavaScript Frame-Busting Code:</strong></p> <ul> <li>Include frame-busting JavaScript code within your web pages to break out of frames and ensure that your content is only displayed in the top-level window.</li></ul> <p><strong>Clickjacking Protection in Browsers:</strong></p> <ul> <li>Some modern browsers provide built-in protection against clickjacking. Keep your users' browsers updated to benefit from the latest security features.</li></ul> <p><strong>Use the sandbox Attribute:</strong></p> <ul> <li>When appropriate, use the <strong>sandbox</strong> attribute on iframes to restrict their behavior, limiting their capabilities and preventing potential security risks.</li></ul> <p><strong>Educate Users:</strong></p> <ul> <li>Educate users on recognizing phishing attempts and suspicious behavior. Make them aware of the importance of not clicking on unfamiliar or unexpected links.</li></ul> <p><strong>Implement Two-Factor Authentication (2FA):</strong></p> <ul> <li>Adding an additional layer of security, such as two-factor authentication, can mitigate the impact of potential unauthorized actions even if clickjacking occurs.</li></ul> <p>By implementing a combination of these techniques, you can significantly reduce the risk of clickjacking on your website and enhance the overall security of user interactions. Keep in mind that security measures should be regularly reviewed and updated to adapt to evolving threats and vulnerabilities.</p> </div> </div> </div> </div> </div> </div>  <div class="popsitepartialContents" data-url="/developersection/relatedpost/157258?type=forum&SubCategoryId=6"></div>  <div class="minstick-ads" data-type="rectangle"> </div>     <div style="width: 100%;" class="my-2 "> <div class="d-flex justify-content-center align-items-center align-content-center position-relative h-100 my-lg-1"> <a href="https://training.mindstick.com/" target="_blank"> <img src="/Content/img/training-adverties.png" class="img-fluid" alt="MindStick Training" title="MindStick Training" /> </a> </div> </div> </div>  <div class="col-12 col-lg-4 sidebar">     <div style="width: 100%;" class="my-2 "> <div class="d-flex justify-content-center align-items-center align-content-center position-relative h-100 my-lg-1"> <a href="https://training.mindstick.com/" target="_blank"> <img src="/Content/img/training-adverties.png" class="img-fluid" alt="MindStick Training" title="MindStick Training" /> </a> </div> </div> <div class=" p-3 shadow-sm bg-white rounded-2 d-flex flex-column gap-3"> <div class="popsitepartialContents" data-url="/developersection/relatedquation/157258?type=forum&SubCategoryId=6"></div> <div class="popsitepartialContents" data-url="/developersection/yourviews?category=web-development"></div> <div class="popsitepartialContents " data-url="/developersection/questionanswer?category=web-development"></div> <div class="popsitepartialContents " data-url="/developersection/tags/forum"></div> </div> </div> </div> </div> </div>  <div class="offcanvas offcanvas-start" data-bs-backdrop="static" tabindex="-1" id="staticLikesBackdrop" aria-labelledby="staticBackdropLabel"> <div class="offcanvas-header shadow border border-start-0 border-top-0 border-end-0"> <h3 class="offcanvas-title" id="staticLikeslabel">Liked By </h3> <button type="button" class="btn-close" data-bs-dismiss="offcanvas" aria-label="Close"></button> </div> <div class="offcanvas-body body" id="staticLikesBackdropBody" data-url="/developersection/likedusers?postid=157258&posttype=forum&page=2"> </div> </div>  <div class="modal fade" id="postanswerBackdrop" data-bs-backdrop="static" data-bs-keyboard="false" tabindex="-1" aria-labelledby="staticBackdropLabel" aria-hidden="true"> <div class="modal-dialog modal-lg modal-dialog-centered modal-dialog-scrollable"> <div class="modal-content"> <div class="modal-header p-2 px-3 border-0"> <h5 class="modal-title fw-bold" id="staticBackdropLabel">Write Answer</h5> <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button> </div> <div class="modal-body pt-0"> <h4 class="m-0 text-dark fw-bold">How to prevent Clickjacking on websites?</h4> <div class="render-data"></div> </div> </div> </div> </div> </div> <footer class=" "> <div class="container-fluid pt-5 ds"> <div class="row g-3 px-lg-5 "> <div class="col-12 col-md-6 col-lg-3"> <h2 class="widget-title">CONTACT <span class="highlight regular">INFO</span> </h2> <div class="media small-teaser d-flex"> <div class="media-left"> <i class="icofont-location-pin pe-2"></i> </div> <div class="media-body"> Software Technology Parks of India, MNNIT Campus, Lucknow Road, Teliarganj, Prayagraj Uttar Pradesh, Pin-211004 (INDIA). </div> </div> <div class="media small-teaser d-flex"> <div class="media-left"> <i class="icofont-email pe-2"></i> </div> <div class="media-body"> contact@mindstick.com </div> </div> <div class="media small-teaser d-flex"> <div class="media-left"> <i class="icofont-ui-dial-phone pe-2"></i> </div> <div class="media-body"> +91-532-2400505 </div> </div> <div class="media small-teaser d-flex"> <div class="media-left"> <i class="icofont-smart-phone pe-2"></i> </div> <div class="media-body"> +91-8299-812988 </div> </div> <hr /> <div class="media small-teaser d-flex"> <div class="media-left"> <i class="icofont-location-pin pe-2"></i> </div> <div class="media-body"> 969-G Edgewater Blvd,Suite <br /> 793 Foster City-94404, CA (USA) </div> </div> <div class="media small-teaser d-flex"> <div class="media-left"> <i class="icofont-ui-dial-phone pe-2"></i> </div> <div class="media-body"> +1-650-242-0133 </div> </div> </div> <div class="col-12 col-md-6 col-lg-3"> <div class="widget widget_nav_menu"> <h2 class="widget-title">Direct <span class="highlight regular">Navigation</span> </h2> <div class="row"> <div class="col-md-5"> <ul class="menu greylinks fontsize_16 list-border"> <li> <i class="icofont-ui-play "></i> <a href="\" title="Home">Home</a> </li> <li> <i class="icofont-ui-play "></i> <a href="/home/tags" title="Users">Tags</a></li> <li> <i class="icofont-ui-play "></i> <a href="/home/categories" title="Users">Categories</a></li> <li> <i class="icofont-ui-play "></i> <a href="/developersection/users" title="Users">Users</a></li> </ul> <ul class="menu greylinks fontsize_16 list-border"> <li> <i class="icofont-ui-play "></i> <a href="/developersection/article" title="Article">Article</a> </li> <li> <i class="icofont-ui-play "></i> <a href="/developersection/blog" title="Blog">Blog</a></li> <li> <i class="icofont-ui-play "></i> <a href="/developersection/forum" title="Forum">Forum</a></li> <li> <i class="icofont-ui-play "></i> <a href="/developersection/interview" title="Interview">Interview</a></li> <li> <i class="icofont-ui-play "></i> <a href="/developersection/beginner" title="Beginner">Beginner</a></li> <li> <i class="icofont-ui-play "></i> <a href="/developersection/news" title="news">News</a></li> <li> <i class="icofont-ui-play "></i> <a href="/developersection/share" title="share">Share</a></li> <li> <i class="icofont-ui-play "></i> <a href="/developersection/startup" title="StartUp">StartUp</a></li> </ul> <ul class="menu greylinks fontsize_16 p-0"> <li> <i class="icofont-ui-play "></i> <a href="/home/pricing" title="Pricing">Pricing</a> </li> <li> <i class="icofont-ui-play "></i> <a href="/career" title="Career">Career</a></li> <li> <i class="icofont-ui-play "></i> <a href="/home/about-internship" title="Internship">Internship</a></li> <li> <i class="icofont-ui-play "></i> <a href="/quiz" title="Quiz">Quiz</a></li> </ul> </div> <div class="col-md-7"> <ul class="menu greylinks fontsize_16 list-border"> <li><i class="icofont-ui-play "></i><a href="/contactus" title="Contact Us">Contact Us</a></li> <li><i class="icofont-ui-play "></i><a href="/home/projectrequest" title="Request a Project">Request a Project</a></li> <li><i class="icofont-ui-play "></i><a href="/home/advertising" title="Advertising">Advertising</a></li> <li><i class="icofont-ui-play "></i><a class="linkFeeBack" href="/contactus?s=FeedBack" title="Feedback">Feedback</a></li> <li><i class="icofont-ui-play "></i><a href="/home/reportabug" title="Report a Bug">Report a Bug</a></li> <li><i class="icofont-ui-play "></i><a href="/home/sitemap" title="Site Map">Site Map</a></li> <li><i class="icofont-ui-play "></i><a href="/developersection/job" title="Site Map">Jobs</a></li> </ul> <ul class="menu greylinks fontsize_16 p-0"> <li><i class="icofont-ui-play "></i><a href="/home/aboutus" title="About Us">About Us</a></li> <li><i class="icofont-ui-play "></i><a href="/home/privacypolicy" title="Privacy Policy">Privacy Policy</a></li> <li><i class="icofont-ui-play "></i><a href="/home/termsandconditions" title="Terms & Conditions">Terms & Conditions</a></li> <li><i class="icofont-ui-play "></i><a href="/cookie-policy" title="Cookie Policy">Cookie Policy</a></li> <li><i class="icofont-ui-play "></i><a href="/home/press-release" title="Press Release">Press Release</a></li> <li><i class="icofont-ui-play "></i><a href="/developersection/rssfeed" title="RSS Feed">RSS Feed</a></li> <li><i class="icofont-ui-play "></i><a href="/developersection/faq" title="FAQ">FAQ</a></li> <li><i class="icofont-ui-play "></i><a href="/home/advertising" title="Affiliate Marketing">Affiliate Marketing</a></li> <li><i class="icofont-ui-play "></i><a href="/help/help-center" title="FAQ">Help Center</a></li> <li><i class="icofont-ui-play "></i><a href="/developersection/learning" title="FAQ">Learning</a></li> <li><i class="icofont-ui-play "></i><a href="/developersection/writingtips" title="FAQ">Writing Tips</a></li> </ul> </div> </div> </div> </div> <div class="col-12 col-md-6 col-lg-3"> <div class="widget widget_categories"> <h2 class="widget-title">Our <span class="highlight regular">Services</span> </h2> <ul class="greylinks p-0"> <li><i class="icofont-ui-play "></i><a href="/business" title="Technology">Business</a></li> <li><i class="icofont-ui-play "></i><a href="/services/technologies" title="Technology">Technology</a></li> <li><i class="icofont-ui-play "></i><a href="/services/cloud-development" title="Cloud Development">Cloud Development</a></li> <li><i class="icofont-ui-play "></i><a href="/services/windows-development" title="Windows App Development">Windows App Development</a></li> <li><i class="icofont-ui-play "></i><a href="/services/web-development" title="Web App Development">Web App Development</a></li> <li><i class="icofont-ui-play "></i><a href="/services/mobile-app-development" title="Mobile App Development">Mobile App Development</a></li> <li><i class="icofont-ui-play "></i><a href="/services/database-development" title="Database Development">Database Development</a></li> <li><i class="icofont-ui-play "></i><a href="/services/search-engine-optimization" title="SEO">Search Engine Optimization</a></li> <li><i class="icofont-ui-play "></i><a href="/services/ui-ux-development" title="UI/UX Development">UI/UX Development</a></li> <li><i class="icofont-ui-play "></i><a href="/services/digital-marketing" title="Digital Marketing">Digital Marketing</a></li> <li><i class="icofont-ui-play "></i><a href="/services/guest-posting" title="Guest Posting">Guest Posting</a></li> <li><i class="icofont-ui-play "></i><a href="/services/cms-software-development" title="CMS Software Development">CMS Software Development</a></li> <li><i class="icofont-ui-play "></i><a href="/services/lms-software-development" title="LMS Software Development">LMS Software Development</a></li> <li><i class="icofont-ui-play "></i><a href="/services/crm-software-development" title="CRM Software Development">CRM Software Development</a></li> <li><i class="icofont-ui-play "></i><a href="/services/erp-software-development" title="ERP Software Development">ERP Software Development</a></li> <li><i class="icofont-ui-play "></i><a href="/services/content-writing" title="Content Writing">Content Writing</a></li> <li><i class="icofont-ui-play "></i><a href="/services/business-listing" title="Business Listing">Business Listing</a></li> <li><i class="icofont-ui-play "></i><a href="/services/artificial-intelligence" title="Artificial Intelligence">Artificial Intelligence</a></li> <li><i class="icofont-ui-play "></i><a href="/services/data-science" title="Data Science">Data Science</a></li> <li><i class="icofont-ui-play "></i><a href="/services/blockchain-technology" title="Blockchain Technology">Blockchain Technology</a></li> <li><i class="icofont-ui-play "></i><a href="/services/startup-promotion-service" title="Startup Promotion">Startup Promotion</a></li> </ul> </div> </div> <div class="col-12 col-md-6 col-lg-3"> <div class="widget widget_categories"> <h2 class="widget-title">MindStick <span class="highlight regular">Network</span> </h2> <ul class="greylinks p-0"> <li><i class="icofont-ui-play "></i><a href="https://training.mindstick.com/" target="_blank" title="MindStick Training & Development"><span>MindStick Training & Development</span> </a></li> <li><i class="icofont-ui-play "></i><a href="https://answers.mindstick.com/" target="_blank" title="MindStick Q&A"><span>MindStick Q&A</span> </a></li> <li><i class="icofont-ui-play "></i><a href="https://yourviews.mindstick.com/" target="_blank" title="YourViews"><span>YourViews</span> </a></li> <li><i class="icofont-ui-play "></i><a target="_blank" href="https://www.mindstick.com/kidszone" title="KidsZone"><span>KidsZone</span> </a></li> <li><i class="icofont-ui-play "></i><a href="https://www.mindstick.com/employeesection/login.aspx" title="Employee Section">Employee Section</a></li> </ul> </div> <div class="widget widget_categories"> <h2 class="widget-title">Our <span class="highlight regular">Products</span> </h2> <ul class="greylinks p-0"> <li><i class="icofont-ui-play "></i><a href="/products/data-converter" title="Data Converter">Data Converter</a></li> <li><i class="icofont-ui-play "></i><a href="/products/cleaner" title="Cleaner">Cleaner</a></li> <li><i class="icofont-ui-play "></i><a href="/products/unit-converter" title="TUC-The Unit Converter">TUC-The Unit Converter</a></li> <li><i class="icofont-ui-play "></i><a href="/products/import-export" title="Import Export">Import Export</a></li> <li><i class="icofont-ui-play "></i><a href="/products/survey-manager" title="Survey Manager">Survey Manager</a></li> <li><i class="icofont-ui-play "></i><a href="/products/tweet-controller" title="Tweet Controller">Tweet Controller</a></li> </ul> </div> </div> </div> <div class="d-flex justify-content-center"> <div class="widget widget_mailchimp"> <h2 class="widget-title">Newsletter <span class="highlight regular">Signup</span> </h2> <div class="col-12"> <form action="/account/subscribe" class="row g-3 mb-3" method="post"><input Name="returnUrl" id="4ec85006-9ba0-48d4-bf5b-bd65f1040cb3" name="returnUrl" type="hidden" value="/forum/157258/how-to-prevent-clickjacking-on-websites" /> <div class="col-12"> <input class="mailchimp_email form-control" data-val="true" data-val-length="The field EmailID must be a string with a maximum length of 50." data-val-length-max="50" data-val-regex="Please Provide a Valid Email ID" data-val-regex-pattern="^([0-9a-zA-Z]([\+\-_\.][0-9a-zA-Z]+)*)+@(([0-9a-zA-Z][-\w]*[0-9a-zA-Z]*\.)+[a-zA-Z0-9]{2,3})$" data-val-required="Email Address Required!" id="74b32912-4baf-4bc2-ba91-7e3260aab341" maxlength="50" name="EmailID" placeholder="Email Address" required="required" type="email" value="" /> <span class="field-validation-valid" data-valmsg-for="EmailID" data-valmsg-replace="true"></span> </div> <div class="col-12 text-center"> <button type="submit" class="btn btn-warning"> <i class="rt-icon2-news me-2"></i> Subscribe </button> </div> </form> </div> </div> </div> </div> <div class="container page_copyright bg-light "> <div class="row text-center py-4"> <div class="col-12 col-md-9 text-black"> <p> <i class="icofont-copyright"></i> Copyright <i class="icofont-copyright"></i>2010 - 2025 MindStick Software Pvt. Ltd. All Rights Reserved </p> </div> <div class="col-12 col-md-3"> <a aria-label="face book account" title="Visit on facebook" target="_blank" rel="noopener noreferrer" href="https://www.facebook.com/pages/MindStick-Software-Pvt-Ltd/111606255562715" class="btn btn-outline-light text-decoration-none link-secondary icon-tw"> <i class="icofont-facebook fs-5"></i> </a> <a aria-label="Twitter account" title="Visit on twitter" target="_blank" rel="noopener noreferrer" href="https://twitter.com/_MindStick_" class="btn btn-outline-light text-decoration-none link-secondary icon-tw"> <i class="icofont-twitter fs-5"></i> </a> <a aria-label="Linkedin accout" title="Visit on linkedin" target="_blank" rel="noopener noreferrer" href="https://www.linkedin.com/company/mindstick-software-pvt.-ltd.?" class="btn btn-outline-light text-decoration-none link-secondary icon-tw"> <i class="icofont-linkedin fs-5"></i> </a> </div> </div> </div> </footer> </div> <div class="cookie-consent show-consent" id="cookie-banner"> <span class="cookie-text"> We use cookies to ensure you have the best browsing experience on our website. By using our site, you acknowledge that you have read and understood our <a href="/cookie-policy" target="_blank"><u>Cookie Policy</u></a> & <a href="/home/privacypolicy" target="_blank"><u>Privacy Policy</u></a> </span> <button aria-label="Accept cookies" class="btn btn-success consent-btn mt-3 mt-md-0 ms-auto" id="accept-cookies">Got It !</button> </div> <div id='div-modal' class="modal fade" data-bs-backdrop="static" data-bs-keyboard="false" tabindex="-1" aria-hidden="true"> <div class="modal-dialog modal-lg modal-dialog-centered"> <div id='div-modal-content' class="modal-content"> </div> </div> </div>  <div class="modal fade" id="staticOnlineBackdrop" data-bs-backdrop="static" data-bs-keyboard="false" tabindex="-1" aria-hidden="true"> <div class="modal-dialog modal-dialog-centered"> <div class="modal-content"> <div class="modal-header p-2 px-3 border-0"> <h2 class="modal-title fw-bold" id="staticOnlineBackdropLabel">Join MindStick Community</h2> <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button> </div> <div class="modal-body p-2 px-3 pb-0" style="color: #3b4045;"> <p class="text-black message fw-bold">You have need login or register for voting of answers or question.</p> </div> <div class="modal-footer d-flex flex-column border-0"> <div class="d-flex"> <a class="btn btn-primary btn-login rounded-pill px-3 px-md-5 me-1 btn-login" href="/login">Login</a> <a class="btn btn-outline-primary rounded-pill px-3 px-md-5 ms-1 " href="/account/signup">SignUp</a> </div> <div class="m-0"> <form action="/account/externallogin?ReturnUrl=%2Fforum%2F157258%2Fhow-to-prevent-clickjacking-on-websites" class="frmExternalLogin" method="post"> <input type="hidden" name="ReturnUrl" value="/forum/157258/how-to-prevent-clickjacking-on-websites"/> <input name="__RequestVerificationToken" type="hidden" value="VWhlwKTnFCJqY9gDgWX_Znz6f4TjEcS1AY57q43jQtSEMe8KVvRLjJw9aKk0ZW0IfXm5VHyaY9kW8YJOZqkQBtJkGJYbhC8mcIUNISODIEQ1" /> <div class="apsc-each-profile text-center"> <button class="btn btn-danger w-100 btn-block mb-3 " type="submit" name="provider" value="GooglePlus" title="Log in using your Google+ account"> <span class="social-icon"> <i class="icofont-google-plus apsc-google"></i> <span class="media-name">Sign in with google</span> </span> </button> </div> </form> </div> </div> </div> </div> </div> <script type="text/javascript"> $(function () { $('#search-form').submit(function () { if ($("#s").val().trim()) return true; return false; }); $.ajaxSetup({ cache: false }); $("input[type='radio'][name='type']").change(function () { var value = $(this).val(); if (value == "blog" || value == "forum" || value == "interview") { $("input[type='checkbox'][name='level']").attr("disabled", "disabled"); } else { $("input[type='checkbox'][name='level']").removeAttr("disabled"); } if (value != "interview") { $("input[type='checkbox'][name='func']").attr("disabled", "disabled"); } else { $("input[type='checkbox'][name='func']").removeAttr("disabled"); } }); }); </script> <script defer src="/scripts/umd/popper.min.js"></script> <script defer src="/scripts/bootstrap.min.js"></script> <script src="/content/layoutwithsidebarbottom.min.js?v=KOEKd_g43gg"></script> <script type="text/javascript"> window.loadJavaScript(["https://cdnjs.cloudflare.com/ajax/libs/sweetalert/2.1.2/sweetalert.min.js", "/scripts/sweet-alerts.js"]); $(function () { window.loadJavaScript('/scripts/prism-js.js'); $(document).on('click', '.post-answer', function (event) { event.preventDefault(); if ("False".toLowerCase() == "false") { $('#staticOnlineBackdrop .modal-body').find('.message').html("You have to login first to post a answer."); $('#staticOnlineBackdrop').modal('show'); return false; } else if ("False".toLowerCase() == "false") { errorMsg("Your Profile is incomplete. Go to your profile setting to complete your profile."); return false; } else if ($(this).data().login == "False") { $('#staticOnlineBackdrop').modal('show'); return false; } var url = $(this).attr("href"); var commentsec = $(this).closest('.comment'); $.ajax({ url: url, type: "GET", cache: false, data: getCommentInfo(commentsec), beforeSend: function (data) { if ($('.answers-pane').find('.loader').length == 0) { $('.answers-pane').html('<div class=" loader text-center d-flex justify-content-center my-3"><span class="fw-bold">Loading...</span><div class="spinner-border mx-3" role="status"><span class="visually-hidden">Loading...</span></div></div>'); } }, success: function (data) { $('.answers-pane').html(''); $('.answers-pane').html(data); }, complete: function () { $('.answers-pane').find('.loader').remove(); }, error: function (xhr, response) { errorMsg("Sorry! Something prolem"); $('.answers-pane').remove(); } }); }); }) </script>  <script> document.addEventListener("DOMContentLoaded", function () { const cookieBanner = document.getElementById("cookie-banner"); const acceptButton = document.getElementById("accept-cookies"); // Check if user has already accepted cookies if (localStorage.getItem("cookieConsent") === "true" && 'False' == 'True') { cookieBanner.style.display = "none"; } // Handle button click acceptButton.addEventListener("click", function () { localStorage.setItem("cookieConsent", "true"); document.cookie = "cookieConsent=true; path=/; max-age=2592000"; cookieBanner.style.display = "none"; }); }); document.getElementById("accept-cookies") .addEventListener("click", function () { gtag('consent', 'update', { 'ad_storage': 'granted', 'analytics_storage': 'granted' }); }); </script>  <script> window.loadJavaScript(["/scripts/link-preview.js?v=roIeyrQt3gg"]); </script> </body> </html>

forum

How to prevent Clickjacking on websites?

Ravi Misra

Can you answer this question?

1 Answers