CS Fundamentals Trainer · JavaScript · Security

Which response headers help defend a page against clickjacking?

  1. `X-Content-Type-Options: nosniff`
  2. `Content-Security-Policy: frame-ancestors 'self'`
  3. `Access-Control-Allow-Origin: https://app.example`
  4. `X-Frame-Options: DENY`
  5. `Strict-Transport-Security: max-age=31536000`

Difficulty: easy

Answer this question

Related questions