datatracker.ietf.org
Sign in
Version 5.12.0.p1, 2015-03-01
Report a bug

HTTP Header Frame Options
draft-ietf-websec-frame-options-00

Document type: Expired Internet-Draft (websec WG)
Document stream: IETF
Last updated: 2013-01-07 (latest revision 2012-07-06)
Intended RFC status: Unknown
Other versions: (expired, archived): plain text, pdf, html
IETF State: Parked WG Document
Document shepherd: No shepherd assigned
IESG State: Expired
Responsible AD: (None)
Send notices to: No addresses provided
Email Authors | IPR Disclosures | References | Referenced By | Check nits | History feed | Search Mailing Lists

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found here:
http://www.ietf.org/archive/id/draft-ietf-websec-frame-options-00.txt

Abstract

To improve the protection of web applications against Clickjacking this standards defines a http response header that declares a policy communicated from a host to the client browser whether the transmitted content MUST NOT be displayed in frames of other pages from different origins which are allowed to frame the content.

Authors

David Ross
Tobias Gondrom <tobias.gondrom@gondrom.org>

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid)