GitHub under ongoing DDoS attack

Re:GitHub under ongoing DDoS attack by sanqui on Sunday March 29, 2015 @08:25AM (#9284603)

You can serve an X-Frame-Options:"DENY" (or "SAMEORIGIN") header to prevent browsers from loading the iframes.

[ Parent | on HN ]

Re:GitHub under ongoing DDoS attack by sunflowerdeath on Sunday March 29, 2015 @08:53AM (#9284648)

But this is a response header, so server shoud respond and that is the goal of attack. Browser doesn't send any request headers saying that site is opened in the iframe.

[ Parent | on HN ]

Re:GitHub under ongoing DDoS attack by sanqui on Sunday March 29, 2015 @09:02AM (#9284671)

Sure, but at least the browser won't render the page, so it won't download the additional content like images and scripts. It's partial mitigation.

[ Parent | on HN ]