Talk:Clickjacking Defense Cheat Sheet

Javascript based soultion : are they good now
Considering the fact that people can disable javascript in framed page should we be recommending Javascript based solution for Clickjacking or we should all bet for just XFO.

I can understand this (javascript based solution) could be a good option when the site can't function without javascript enabled however any site which has script enabled just for this feature can again be victimized using iframe property like sandbox="allow-forms allow-scripts"

--Anant Shrivastava (talk) 01:47, 22 June 2014 (CDT)