#510 - Clickjacking hacks could be performed
| Identifier | #510 |
|---|---|
| Issue type | Minor issue (breaks specific functionality) |
| Title | Clickjacking hacks could be performed |
| Status | Completed |
| Handling member | Chris Graham |
| Version | 8.1 |
| Addon | General / Uncategorised |
| Description | Clickjacking hacks work by persuading someone to click a button by directing them to a malicious site that overlays something else on top of the target site (using frames and CSS positioning), and effectively misdirecting the users click.
Use the newish 'X-Frame-Options' header to protect against this, for forms and form any zone configured as protected. |
| Steps to reproduce | |
| Funded? | No |
| Hotfixes | hotfix-510, 2012-05-27 1pm.tar Only apply these hotfixes if you absolutely need them and cannot wait until the next release of Composr (releases are more reliable and strictly tested). We provide no guarantee that hotfixes will work; they may even break your site especially if a hotfix depends on another hotfix. Always make a site backup if you attempt to apply a hotfix. As of Composr version 11, the recommended way to apply a hotfix is by following the same steps as an upgrade:
For Composr version 10, manually extract the files (e.g., using 7-Zip) and overwrite files in your Composr installation that are older than the ones in the hotfix (check the file modification date/time). Skip hotfix files that do not exist in your installation. |
| Commits |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".


Comments
Fix accidentally caused parse error.