Author |
|
gazzafield
Joined: 11 Apr 2017 Posts: 4 Location: UK, Glasgow
|
Posted: Tue 11 Apr '17 16:02 Post subject: Preventing Clickjacking |
|
|
OK, so, had the usual Google around to see how to stop it as it appears my web server is open to clickjacking. The standard response is to add the following line to the /etc/apache2/apache2.conf file:-
Header always append X-Frame-Options
So, my rather simple question is, where? Where does it go in the file? The beginning? The end? Anywhere I like? |
|
Back to top |
|
Steffen Moderator
Joined: 15 Oct 2005 Posts: 3115 Location: Hilversum, NL, EU
|
Posted: Tue 11 Apr '17 17:00 Post subject: |
|
|
Anywhere |
|
Back to top |
|
gazzafield
Joined: 11 Apr 2017 Posts: 4 Location: UK, Glasgow
|
Posted: Wed 12 Apr '17 11:15 Post subject: |
|
|
Tried that. Popped it in at the end of the file and then my Apache Service fails to restart. Thoughts? |
|
Back to top |
|
admin Site Admin

Joined: 15 Oct 2005 Posts: 701
|
Posted: Wed 12 Apr '17 11:48 Post subject: |
|
|
Did you enabled mod_header ?
Uncomment:
LoadModule headers_module modules/mod_headers.so |
|
Back to top |
|
gary s
Joined: 31 Mar 2017 Posts: 5 Location: usa, Story
|
Posted: Mon 17 Apr '17 21:24 Post subject: I guess I am confussed |
|
|
I thought that click jacking is something you as the host would do to the user, not something that would be done to your server. |
|
Back to top |
|
C0nw0nk
Joined: 07 Oct 2013 Posts: 241 Location: United Kingdom, London
|
|
Back to top |
|
glsmith Moderator

Joined: 16 Oct 2007 Posts: 2268 Location: Sun Diego, USA
|
Posted: Wed 19 Apr '17 0:03 Post subject: |
|
|
This site hit my site yesterday so I checked it out. Besides scanning your server's headers it has some decent easy to read information on setting them for security.
https://securityheaders.io |
|
Back to top |
|