Fix

Missing X-Frame-Options

Prevent clickjacking by controlling whether your site can be embedded in iframes.

InfoCategory: security
Related checks
Fix steps
  • Set X-Frame-Options at edge/proxy.
  • Prefer DENY or SAMEORIGIN based on needs.
Verify
  • Re-run Headers Check and confirm it’s present.
Next fixes