{"id":19060,"date":"2017-04-13T06:01:53","date_gmt":"2017-04-13T05:01:53","guid":{"rendered":"https:\/\/jurnsearch.wordpress.com\/?p=19060"},"modified":"2017-04-13T06:01:53","modified_gmt":"2017-04-13T05:01:53","slug":"anti-click-jacking","status":"publish","type":"post","link":"https:\/\/jurn.link\/jurnsearch\/index.php\/2017\/04\/13\/anti-click-jacking\/","title":{"rendered":"Anti click-jacking code"},"content":{"rendered":"

For your Web page, here’s strong anti-framejacking and anti-clickjacking code, which has been tested and currently busts nasty frame-jackers such as In.is (aka Linkis). As such these snippets may be useful for journals and other academic services, to prevent legitimate content from being hijacked and surrounded by frames advertising ‘essay-writing services’ or predatory publisher services or worse.<\/p>\n

\"\"<\/a><\/p>\n

Source: Stanford Security Lab<\/a> via a recent blog post by Zipline Interactive<\/a>, where there’s also additional defensive code to add to your website’s root .htaccess file (if you have FTP access and<\/em> your host will allow upload of a changed .htaccess)…<\/p>\n

Header set X-Frame-Options SAMEORIGIN<\/code><\/p>\n

The .htaccess code is ‘as well as’, serving as a second line of deeper defence, and is not required for the first code suggestion to work in your Web page. Most modern Web browsers understand the self-explanatory SAMEORIGIN command when they hear it from a website.<\/p>\n

Those with a hosted WordPress blog or journal may also want to consider the Frame Buster plugin<\/a>. So far as I know there’s nothing similar for the Open Journal System (OJS) or Omeka or similar academic content plug-and-play systems. But perhaps there should be, if they don’t already have such counter-measures baked in?<\/p>\n","protected":false},"excerpt":{"rendered":"

For your Web page, here’s strong anti-framejacking and anti-clickjacking code, which has been tested and currently busts nasty frame-jackers such …<\/p>\n

Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[],"class_list":["post-19060","post","type-post","status-publish","format-standard","hentry","category-jurn-tips-and-tricks"],"_links":{"self":[{"href":"https:\/\/jurn.link\/jurnsearch\/index.php\/wp-json\/wp\/v2\/posts\/19060","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jurn.link\/jurnsearch\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jurn.link\/jurnsearch\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jurn.link\/jurnsearch\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jurn.link\/jurnsearch\/index.php\/wp-json\/wp\/v2\/comments?post=19060"}],"version-history":[{"count":0,"href":"https:\/\/jurn.link\/jurnsearch\/index.php\/wp-json\/wp\/v2\/posts\/19060\/revisions"}],"wp:attachment":[{"href":"https:\/\/jurn.link\/jurnsearch\/index.php\/wp-json\/wp\/v2\/media?parent=19060"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jurn.link\/jurnsearch\/index.php\/wp-json\/wp\/v2\/categories?post=19060"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jurn.link\/jurnsearch\/index.php\/wp-json\/wp\/v2\/tags?post=19060"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}