HTTP Header Frame Options
draft-ietf-websec-frame-options-00

This Internet-Draft is no longer active. Unofficial copies of old Internet-Drafts can be found here:
http://tools.ietf.org/id/draft-ietf-websec-frame-options

Abstract

To improve the protection of web applications against Clickjacking this standards defines a http response header that declares a policy communicated from a host to the client browser whether the transmitted content MUST NOT be displayed in frames of other pages from different origins which are allowed to frame the content.

Authors

David Ross
Tobias Gondrom <tobias.gondrom@gondrom.org>

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid)