My website has an iframe used for loading my client's websites (only 5).How can I make sure the iframe is secure? Also by editing
iframe src It allows to load any other websites.How can I prevent it?
If a site can be placed within an iframe, then it is vulnerable to ClickJacking. This does not expose the parent site that hosts the iframe, but rather any site is subject to this type of manipulation. There are ways of mitigating ClickJacking for sites that must be frame-able.