Clickjacking protection
What it can report
- ! medium neither frame-ancestors nor X-Frame-Options How to fix it
- ! medium X-Frame-Options with ALLOW-FROM, conflicting or unknown values How to fix it
- ! medium frame-ancestors allows any site How to fix it
How it counts
The score is computed by fixed rules from the checks that ran, and this check has a weight of 3 within Security. A check that errors or is skipped is shown as "could not check" and left out of the score, never counted as a pass. Fixes and the AI summary are written after scoring and never change it.
Related checks
Scan your own domain and see this check run.