> X-Frame-Options response header is set to SAMEORIGIN So break every iframe... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		drzaiusapelord on March 28, 2012 \| parent \| context \| favorite \| on: I can manipulate your amazon.com recommendations > X-Frame-Options response header is set to SAMEORIGIN So break every iframe on the net to fix Amazon's lazy approach to recommendations?

abraham on March 28, 2012 [–]

This would only break iframes that are loading Amazon pages and Amazon really should be doing this to prevent click-jacking anyways.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact