There is an apache server hosting some website written in PHP and is accessible thru internet. How do configure the apache to resolve 'Missing Cross-Frame Scripting Defence' and can 'Missing Cross-Frame Scripting Defence' warning be ignored?

closed as off-topic by Gilles, WhiteWinterWolf, user45139, Ulkoma, Mark Sep 6 '15 at 23:07

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – Gilles, Mark
If this question can be reworded to fit the rules in the help center, please edit the question.

  • Same note as your previous question: I think this is better to ask in SuperUser website. – user45139 Sep 4 '15 at 6:33
  • 1
    I think that this question is better suitable for ServerFault than SuperUser. – Vilican Sep 4 '15 at 16:06
  • dear moderators, please enlighten me if I should ask in SuperUser or ServerFault. thank you. – user275517 Sep 8 '15 at 9:09
  • I'd suggest SuperUser - see how it goes. – Rory Alsop Sep 8 '15 at 14:25

You need to send an X-Frame-Options header, usually with the value "sameorigin". You can do this in Apache using mod_headers, something like:

Header set X-Frame-Options sameorigin

Not the answer you're looking for? Browse other questions tagged or ask your own question.