PCI - Web Application Potentially Vulnerable to Clickjacking 443 / tcp / www

Can you provide a URL or something to review?

Are you running some sort of security scan against your web app?

In general, one of the easiest things to do, is to add an http response header to the website's configuration.  The header is called X-Frame-Options and you can add this to the site thru the IIS Manager.  It requires no code change only a configuration change at the IIS or web site level.

Link:  https://support.microsoft.com/en-us/kb/2694329

I recommend doing this at the Server scope level since it will propagate down to all sites hosted on the web server.  If necessary, you could remove the header at the web site level if it is deemed as not required for the operation of a specific site.

Reference link:  https://en.wikipedia.org/wiki/Clickjacking

Dan

Thanks. We will try X-Frame and revert.

This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.