No clickjacking protection
Scan rule · RSC-SEC-005
- Security
- Severity: Low
- CWE-1021
Checks X-Frame-Options or CSP `frame-ancestors` against embedding in foreign pages.
Scan tier
- External scan (anonymous)
How to fix it
Set CSP `frame-ancestors 'self'` (preferred over X-Frame-Options).