Clickjacking test
Check if another site can load your page in a hidden frame and trick people into clicking it.
Updated
Only test sites you own or may test.
Learn
What clickjacking is
Clickjacking is an attack where another site loads your page in a frame that people cannot see. The attacker puts a decoy on top, like a prize button or a video play button.
When a visitor clicks the decoy, the click goes to your page. If they are logged in, that click can change a setting, send a payment, or delete data. Your server sees a normal click from a real user.
The fix is to tell browsers who may frame your pages. Send Content-Security-Policy: frame-ancestors, and X-Frame-Options for old browsers.
Clickjacking in the glossary