sc-clickjacking

To check for clickjacking vulnerabilities, scan your web endpoints to detect missing X-Frame-Options headers and CSP frame-ancestors directives. This skill audits HTTP responses and generates structured findings with remediation guidance to prevent UI redressing.

X-Frame-Options and CSP frame-ancestors are both HTTP response headers that prevent clickjacking by controlling who can embed your site. This skill detects misconfigurations in either header and provides actionable remediation steps to mitigate frame-busting bypasses and secure HTML content.

Run this scanner against your web endpoints to generate a frame-protection audit report. It checks for X-Frame-Options and CSP frame-ancestors, identifying specific responses that could be embedded by malicious sites and outputting structured findings with actionable remediation guidance.

Yes, this clickjacking scanner is applicable to web applications delivering HTML content across production, staging, and test environments. It identifies missing or misconfigured frame protection headers and CSP directives during security audits to help protect users from UI redressing.

Your web application may remain vulnerable to clickjacking due to misconfigured X-Frame-Options headers or missing CSP frame-ancestors directives. This skill identifies these misconfigurations and provides actionable steps to mitigate frame-busting bypasses and secure sensitive actions.