File tree Expand file tree Collapse file tree 1 file changed +6
-1
lines changed
4-frames-and-windows/06-clickjacking Expand file tree Collapse file tree 1 file changed +6
-1
lines changed Original file line number Diff line number Diff line change @@ -137,15 +137,20 @@ The header may have 3 values:
137
137
` ALLOW-FROM domain `
138
138
: Allow inside a frame if the parent document is from the given domain.
139
139
140
- For instance, Twitter uses ` X-Frame-Options: SAMEORIGIN ` . Here's the result:
140
+ For instance, Twitter uses ` X-Frame-Options: SAMEORIGIN ` .
141
+
142
+ ```` online
143
+ Here's the result:
141
144
142
145
```html
143
146
<iframe src="https://twitter.com"></iframe>
144
147
```
145
148
149
+ <!-- ebook: prerender/ chrome headless dies and timeouts on this iframe -->
146
150
<iframe src="https://twitter.com"></iframe>
147
151
148
152
Depending on your browser, the `iframe` above is either empty or alerting you that the browser won't permit that page to be navigating in this way.
153
+ ````
149
154
150
155
## Showing with disabled functionality
151
156
You can’t perform that action at this time.
0 commit comments