[ Web Proxy ]
URL:
Viewing: https://developer.mozilla.org/ko/docs/Web/Security/Attacks/Clickjacking [Back]  [Original]
(Clickjacking) - | MDN
HTML

HTML: Markup language

HTML reference
HTML guides
Markup languages
CSS

CSS: Styling language

CSS reference
CSS guides
Layout cookbook
JavaScriptJS

JavaScript: Scripting language

JS reference
JS guides
Web APIs

Web APIs: Programming interfaces

Web API reference
Web API guides
All

All web technology

Technologies
Topics
Learn

Learn web development

Frontend developer course
Learn HTML
Learn CSS
Learn JavaScript
Tools

Discover our tools

About

Get to know MDN better

Blog
Toggle sidebar
  4. (Clickjacking)
Theme
  • OS default
  • Light
  • Dark
Remember language Learn more

This page was translated from English by the community. Learn more and join the MDN Web Docs community.

View in English Always switch to English

(Clickjacking)

(Clickjacking) . , . , , .

(frame-ancestors) Set-Cookie .

In this article

Help improve MDN

Was this page helpful to you?
Yes No
Learn how to contribute

This page was last modified on 2025 6 27 by MDN contributors.

View this page on GitHub Report a problem with this content
Clear filter input
  1. Glossary
    2. Accent ()
    3. Accessibility ()
    5. Accessible description
    6. (Accessible name)
    7. Adobe Flash
    8. (Advance measure)
    9. AJAX
    10. Algorithm
    11. Alignment container
    12. Alignment subject
    13. ( )
    14. ALPN
    15. API
    16. Safari
    17. (Application Context)
    18. Argument
    19. ARIA
    20. ARPA
    21. ARPANET
    23. ASCII
    24. Aspect ratio
    25. (Asynchronous)
    26. ATAG
    28. Authentication
    29. Authenticator
    30. Bandwidth
    31. Base64
    32. Baseline
      1. ()
      2. ()
    33. BCP 47 language tag
    34. Beacon
    35. (Bzier curve)
    36. bfcache
    37. BiDi
    38. BigInt
    39. (Binding)
    40. Bitwise flags
    41. Blink
    42. blink element (<blink> tag)
    43. Block
      1. (CSS)
      2. Block (scripting)
      1. Boolean (JavaScript)
      2. Boolean attribute (ARIA)
      3. Boolean attribute (HTML)
    48. Breadcrumb ()
    49. Brotli
    52. (Buffer)
    53. Bun
    55. Cacheable
    56. CalDAV
    59. (Camel case)
    60. (Canonical order)
    62. Card sorting
    63. CardDAV
    64. (Caret)
    65. CDN
    66. (Certificate authority)
    68. - (Challenge-response authentication)
    69. Character
    70. Character encoding
    71. Character reference
    72. (Character set)
    73. Chrome
    74. CIA
    75. (Cipher)
    76. (Cipher suite)
    77. (Ciphertext)
    78. (Class)
    79. Client-side rendering (CSR)
    80. (Closure)
    81. Cloud
    82. Cloud computing
    83. CMS
    84. (Code point)
    85. Code splitting ()
    86. (Code unit)
    87. (Codec)
    88. Color space
    89. (Color wheel)
    90. Compile
    91. (Compile time)
    92. (Composite operation)
    93. Compression Dictionary Transport
    94. Computer Programming
    95. (Conditional)
    96. (Constant)
    97. (Constructor)
    98. Content header
    99. Contentful paint
    100. Continuous integration
    101. (Continuous Media)
    102. (Control flow)
    103. Cookie
    104. Copyleft
    105. CORS
    106. CORS (CORS-safelisted request header)
    107. CORS (CORS-safelisted response header)
    108. Crawler
    109. Credential
    110. CRLF
    112. (CSRF)
    113. (Cross-site scripting (XSS))
    114. CRUD (Create, Read, Update, Delete)
    115. (Cryptanalysis)
    116. (Cryptography)
    117. CSP
    118. CSS
    119. CSS (CSS Object Model, CSSOM)
    120. CSS (CSS pixel)
    121. CSS
    122. Cumulative Layout Shift (CLS)
    123. (Data structure)
    124. Database
    125. (Debounce)
    126. (Decryption)
    128. (Delta)
    129. (Denial of Service)
    130. Deno
    131. Descriptor (CSS)
    132. (Deserialization)
    133. (Developer Tools)
    134. Device pixel
    135. Digital certificate
    136. Digital signature
    137. (Distributed Denial of Service, DDoS)
    138. (DeMilitarized Zone, DMZ)
    139. DNS
    140. DNS over HTTPS (DoH)
    142. (Document directive)
    143. (Document environment)
    144. DOM
    145. (Domain)
    147. (Domain sharding)
    148. (Dominator)
    149. DSL
      1. (Digital Subscriber Line, DSL)
      2. (Domain-Specific Language, DSL)
    150. (Datagram Transport Layer Security, DTLS)
    151. DTMF
    152. (Dynamic typing)
    153. (European Computer Manufacturers Association, ECMA)
    154. ECMAScript
    155. (Effective connection type)
    157. (Encapsulation)
    158. (Encryption)
    160. (Engine)
      1. JavaScript engine
      2. (Rendering engine)
    161. (Entity)
    163. (Enumerated)
    164. Escape character
    165. (Event)
    166. (Exception)
    167. EXIF
    168. (Expando)
    169. Extrinsic size
    170. (Fallback alignment)
    172. (Favicon)
    173. Federated identity
    174. Fetch (Fetch directive)
    175. (Fetch metadata request header)
    176. (Fingerprinting)
    177. Firefox (Firefox OS)
    179. (First contentful paint, FCP)
    180. CPU (First CPU idle)
    181. (First input delay, FID)
    182. (First Meaningful Paint, FMP)
    183. (First paint)
    185. (Flex)
    189. Flow relative values
    191. Forbidden response header name
    192. Fork
    193. (Fragmentainer)
    194. (Frame rate, FPS)
    195. FTP
    196. FTU
    197. (function)
    198. (Fuzz testing)
    199. (Gamut)
    200. (Garbage collection)
    201. (Gecko)
    202. General
    203. GIF
    204. (Git)
    206. (Global scope)
    207. (Global variable)
    208. Glyph
    209. Google Chrome
    210. GPL
    211. GPU
    212. (Graceful degradation)
    213. (Grid)
    214. (Grid Areas)
    215. Grid Axis
    216. (Grid Cell)
    217. (Grid Column)
    218. (Grid container)
    219. (Grid Lines)
    220. (Grid Row)
    221. (Grid Tracks)
    222. Guaranteed-invalid value
    223. (Gutters)
    224. GZip (GZip compression)
    225. Digest
    226. Hash routing
    227. Head
    228. (High-level programming language)
    229. (HMAC)
    231. HOL blocking
    232. (Host)
    233. (Hotlink)
    234. (Houdini)
    235. HTTP (HPKP)
    236. HSTS
    237. HTML
    238. HTML color codes
    239. HTML5
    240. HTTP
    241. HTTP content
    243. HTTP/2
    244. HTTP/3
    245. HTTPS
    246. HTTPS RR
    247. Hyperlink
    248. Hypertext ()
    249. IANA
    250. ICANN
    251. ICE
    252. (IDE)
    255. Identity provider (IdP)
    256. (IDL)
    257. IETF
    258. IIFE
    259. IMAP
    260. Immutable
    261. IndexedDB
    262. (Information architecture)
    263. (Inheritance)
    264. (Ink overflow)
    266. (Input method editor)
    267. Inset properties
    268. (Instance)
    269. Interaction to Next Paint (INP)
    270. (internationalization, I18N)
    271. Internet
    272. (Interpolation)
    273. (Intrinsic size)
    274. Invariant
    275. IP Address
    276. IPv4
    277. IPv6
    278. (IRC)
    279. ISO
    280. ISP
    281. ITU
    282. (Jank)
    283. Java
    284. JavaScript
    285. Jitter
    286. JPEG
    287. JSON
    288. JSON type representation
    289. Just-In-Time Compilation (JIT)
    290. (Kebab case)
    291. (Key)
    292. (Keyword)
    293. LCP
    294. Latency
    296. (Layout viewport)
    297. Lazy load
    298. Leading
    299. LGPL
    300. (Ligature)
    301. Literal ()
    302. (Local scope)
    303. (Local variable)
    304. (Locale)
    305. Localization
    306. Logical properties
    307. (Long task)
    308. (Loop)
    309. (Lossless compression)
    310. (Lossy compression)
    311. (Left To Right, LTR)
    313. (Main thread)
    314. (Markup)
    315. MathML
    316. (Media)
      1. (Media) ( , Audio-visual presentation)
      2. (Media) (CSS)
    317. Media query
    319. Method
    320. Microsoft Edge
    321. Microsoft Internet Explorer
    322. (Middleware)
    323. (MIME)
    324. MIME type
    325. (Minification)
    326. MitM
    327. (Mixin)
    328. (Mobile First)
    329. (Modem)
    330. (Modularity)
    331. Mozilla Firefox
    332. Multi-factor authentication
    333. Mutable
    334. MVC
    335. (Namespace)
    336. NaN
    337. NAT
    338. (Native)
    339. (Navigation directive)
    340. (Netscape Navigator)
    341. (Network throttling)
    342. NNTP
    343. (Node)
      1. (DOM)
      2. (networking)
    344. Node.js
    345. (Non-normative)
    346. Nonce
    347. (Normative)
    348. Null
    349. Nullish
    350. Number
    351. Object
    352. Object reference
    353. OOP
    354. OpenGL
    355. OpenSSL
    356. (Opera Browser)
    357. Operand
    358. Operator
    360. OTA
    361. OWASP
    362. P2P
    363. PAC
    364. (Packet)
    365. (Page load time)
    366. (Page prediction)
    367. (Parameter)
    368. (Parent object)
    369. (Parse)
    370. (Parser)
    371. (Payload body)
    372. (Payload header)
    373. PDF
    374. (Perceived performance)
    375. Percent-encoding( )
    376. PHP
    377. Physical properties
    378. Pixel
    379. (Placeholder names)
    380. (Plaintext)
    381. (Plugin)
    382. PNG
    383. Polyfill
    384. (Polymorphism)
    385. POP3
    386. (Port)
    387. (Prefetch)
    389. (Prerender)
    390. (Presto)
    393. (Privileged)
    394. (Privileged code)
    396. (Progressive web apps)
    397. (Promise)
    398. Property
      1. Property (CSS)
      2. Property (JavaScript)
    400. Prototype
    403. (Pseudo-class)
    404. (Pseudo-element)
    406. (Public-key cryptography)
    407. (Python)
    408. (Quality values)
    409. (Quaternion)
    410. QUIC
    411. RAIL
    412. (Random Number Generator)
    413. (Raster image)
    414. Rate limit
    415. RDF
    416. Reading order
    417. (Real User Monitoring, RUM)
    418. (Recursion)
    419. Reflow
    420. (eTLD)
    422. Relying party
    423. (Render-blocking)
    424. (Repaint)
    425. Replaced elements
    426. (Replay attack)
    427. Repo
    428. (Reporting directive)
    429. (Representation header)
    431. (Resource Timing)
    433. (Responsive web design)
    434. REST
    435. RGB
    436. RIL
    437. Robots.txt
    438. (Round Trip Time, RTT)
    440. RSS
    441. Rsync
    442. RTCP (RTP )
    443. RTF
    444. RTL (Right to Left)
    445. RTP (Real-time Transport Protocol, ) SRTP (Secure RTP, RTP)
    446. (Real-time streaming protocol, RTSP)
    447. (Ruby)
      1. (HTTP )
    449. Salt
    450. (Same-origin policy)
    451. SCM
    453. (Screen reader)
    454. (Script-supporting element)
    455. Scroll boundary
    456. Scroll chaining
    457. (Scroll container)
    458. Scroll snap
    459. SCTP
    460. SDK
    461. SDP
    462. (Search engine)
    463. (Secure Context)
    464. (SSL)
    465. CSS (Selector (CSS))
    466. Semantics
    467. SEO
    468. (Serializable object)
    469. (Serialization)
    470. Server
    471. (Server Timing)
    472. Server-side rendering (SSR)
    473. (Session Hijacking)
    474. SGML
    475. (Shadow tree)
    478. Signature
      2. (signature) ()
    479. SIMD
    480. SISD
    481. (Site)
    482. (Site map)
    483. SLD
    484. (Sloppy mode)
    485. URL (Slug)
    486. (Smoke Test)
    487. (Society of Motion Picture and Television Engineers, SMPTE)
    488. SMTP
    489. (Snake case)
    490. (Snap positions)
    491. (Simple Object Access Protocol, SOAP)
    492. Social engineering
    493. Soft navigation
    494. Source map
    495. (Single-page application, SPA)
    496. (Specification)
    497. (Speculative parsing)
    498. (Speed index, SI)
    499. SQL
    500. SQL (SQL Injection)
    501. (Subresource Integrity, SRI)
    502. (Stacking context)
    503. (State machine)
    504. (Statement)
    505. (Static method)
    506. (SSG)
    507. (Static typing)
    508. (Sticky activation)
    509. (Strict mode)
    510. String
    511. Stringifier
    512. NAT (Session Traversal Utilities for NAT, STUN)
    513. (Style origin)
    514. (Stylesheet)
    515. (Submit button)
    516. (SVG)
    517. SVN
    518. Symbol
    519. (Symmetric-key cryptography)
    520. (Synchronous)
    521. (Syntax)
    522. (Syntax error)
    523. (Synthetic monitoring)
    524. (Table Grid Box)
    525. (Table Wrapper Box)
    527. TCP
    528. TCP (TCP handshake)
    529. TCP (TCP slow start)
    530. (Telnet)
    531. (Texel)
    532. (The Khronos Group)
    533. (Thread)
    534. Three js
    535. (Throttle)
    536. Time to first byte (TTFB)
    537. Time to interactive (TTI)
    538. (top-level domain, TLD)
    539. (Trust On First Use, TOFU)
    540. (Top layer)
    541. (Transient activation)
    542. (TLS)
    543. (Tree shaking)
    544. Trident
    546. TTL
    547. TURN
    548. (Type)
    549. (Type coercion)
    551. TypeScript
    552. UAAG
    553. (User Datagram Protocol, UDP)
    554. UI
    555. undefined
    557. (Unix time)
    558. URI
    559. URL
    560. URN
    561. (Usenet)
    563. UTF-8
    564. UTF-16
    565. UUID
    566. UX
    567. (Validator)
    568. (Value)
    569. Variable
    570. (Vendor Prefix)
    572. (Visual Viewport)
    574. VoIP
    575. W3C
    576. WAI
    577. WCAG
    578. (Web performance)
    579. (Web server)
    580. Web standards
    581. (WebAssembly)
    582. (Web Distributed Authoring and Versioning, WebDAV)
    583. WebExtensions
    584. WebGL
    585. WebIDL
    586. WebKit
    587. WebM
    588. WebP
    589. WebRTC
    590. WebSockets
    591. WebVTT
    592. WHATWG
    593. (Whitespace)
    594. WindowProxy
    595. World Wide Web
    596. Wrapper
    597. XForms
    598. XHTML
    599. XInclude
    600. XLink
    601. XML
    602. XHR (XMLHttpRequest)
    603. XPath
    604. XQuery
    605. XSLT
    606. Zstandard compression
MDN

Your blueprint for a better internet.

MDN
Contribute
Developers
Mozilla

Portions of this content are 19982026 by individual mozilla.org contributors. Content available under a Creative Commons license.

Web Proxy Viewer  |  New URL  |  Original Page