Clickjacking is a technique by which a malicious party embeds your website in an <iframe>, then hovers buttons over it to make the user think he is clicking on your site when in fact he is communicating with the parent frame.
@@ -39,7 +42,7 @@ Bug Tracker
Bugs are tracked on `GitHub Issues <https://github.com/OCA/web/issues>`_.
In case of trouble, please check there if your issue has already been reported.
If you spotted it first, help us smashing it by providing a detailed and welcomed
If you spotted it first, help us to smash it by providing a detailed and welcomed
<p><aclass="reference external"href="https://odoo-community.org/page/development-status"><imgalt="Beta"src="https://img.shields.io/badge/maturity-Beta-yellow.png"/></a><aclass="reference external"href="http://www.gnu.org/licenses/agpl-3.0-standalone.html"><imgalt="License: AGPL-3"src="https://img.shields.io/badge/licence-AGPL--3-blue.png"/></a><aclass="reference external"href="https://github.com/OCA/web/tree/11.0/web_clickjack_protection"><imgalt="OCA/web"src="https://img.shields.io/badge/github-OCA%2Fweb-lightgray.png?logo=github"/></a><aclass="reference external"href="https://translation.odoo-community.org/projects/web-11-0/web-11-0-web_clickjack_protection"><imgalt="Translate me on Weblate"src="https://img.shields.io/badge/weblate-Translate%20me-F47D42.png"/></a><aclass="reference external"href="https://runbot.odoo-community.org/runbot/162/11.0"><imgalt="Try me on Runbot"src="https://img.shields.io/badge/runbot-Try%20me-875A7B.png"/></a></p>
<p><aclass="reference external image-reference"href="https://odoo-community.org/page/development-status"><imgalt="Beta"src="https://img.shields.io/badge/maturity-Beta-yellow.png"/></a><aclass="reference external image-reference"href="http://www.gnu.org/licenses/agpl-3.0-standalone.html"><imgalt="License: AGPL-3"src="https://img.shields.io/badge/licence-AGPL--3-blue.png"/></a><aclass="reference external image-reference"href="https://github.com/OCA/web/tree/11.0/web_clickjack_protection"><imgalt="OCA/web"src="https://img.shields.io/badge/github-OCA%2Fweb-lightgray.png?logo=github"/></a><aclass="reference external image-reference"href="https://translation.odoo-community.org/projects/web-11-0/web-11-0-web_clickjack_protection"><imgalt="Translate me on Weblate"src="https://img.shields.io/badge/weblate-Translate%20me-F47D42.png"/></a><aclass="reference external image-reference"href="https://runboat.odoo-community.org/builds?repo=OCA/web&target_branch=11.0"><imgalt="Try me on Runboat"src="https://img.shields.io/badge/runboat-Try%20me-875A7B.png"/></a></p>
<p>Clickjacking is a technique by which a malicious party embeds your website in an <iframe>, then hovers buttons over it to make the user think he is clicking on your site when in fact he is communicating with the parent frame.</p>
<p>Clickjacking can be prevented on the webserver side by adding headers, but there are <aclass="reference external"href="https://github.com/niutech/x-frame-bypass">ways around this</a>. This module prevents clickjacking more thoroughly by making it impossible for your site to be embedded. It does so by adding a small “framebreaker” Javascript which creates a CSS style element on the fly to hide the body of the current page by default. Then, if it doesn’t detect a parent frame, it removes it again.</p>
<aclass="reference external image-reference"href="https://odoo-community.org"><imgalt="Odoo Community Association"src="https://odoo-community.org/logo.png"/></a>
<p>OCA, or the Odoo Community Association, is a nonprofit organization whose
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.