News for hackers. Stuff that matters.

A comment on HTTP Security headers you should be using. Parent comment

Re:HTTP Security headers you should be using by duskwuff on Thursday January 23, 2014 @11:53AM (#7109296)
> X-Frame-Options is fine, since modern ads use JS and not IFRAMEs.

Also because X-Frame-Options restricts what can frame you, not what you can load in frames.

[ Parent | on HN ]

There are no comments on this comment yet.