security · security.x-frame-options.missing
Missing X-Frame-Options header
Without it your pages can be embedded in an invisible iframe for clickjacking attacks.
Why it matters
X-Frame-Options (or frame-ancestors CSP) prevents your site being embedded in iframes for clickjacking attacks.
Example fix
X-Frame-Options: SAMEORIGIN
Authoritative reference
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
Run a full audit of your site
Free, no signup, no crawl cap. Check this and 90+ other factors across every public page.
Audit my site →