2026-06-10
What is clickjacking? An attack that makes you click buttons on a transparent page laid over another
Clickjacking layers your real site invisibly over an attacker's page so the user performs an unintended action (transfer, settings change, consent). The main defense is refusing to be framed: CSP frame-ancestors plus X-Frame-Options.