Clickjacking
Medium · UI Redress · CWE-1021
Description
Victim UI is framed so clicks hit hidden controls.
Root cause
Missing frame protections.
Impact
Unintended actions as the user.
Detection
Framing tests.
Mitigation
CSP frame-ancestors / X-Frame-Options.
Secure coding
Deny framing by default.
Safe lab example
In-browser Labs header challenge
Practise related skills in Labs or deepen on Academy library.