Skip to content

Commit

Permalink
Removed outdated note about limitations in Clickjacking protection.
Browse files Browse the repository at this point in the history
There is no need to list old browser versions or point users to
workarounds.
  • Loading branch information
felixxm authored Jul 4, 2024
1 parent 55a2e31 commit f302343
Showing 1 changed file with 3 additions and 20 deletions.
23 changes: 3 additions & 20 deletions docs/ref/clickjacking.txt
Original file line number Diff line number Diff line change
Expand Up @@ -116,24 +116,7 @@ a decorator overrides the middleware.
Limitations
===========

The ``X-Frame-Options`` header will only protect against clickjacking in a
modern browser. Older browsers will quietly ignore the header and need `other
clickjacking prevention techniques`_.
The ``X-Frame-Options`` header will only protect against clickjacking in
`modern browsers`_.

Browsers that support ``X-Frame-Options``
-----------------------------------------

* Internet Explorer 8+
* Edge
* Firefox 3.6.9+
* Opera 10.5+
* Safari 4+
* Chrome 4.1+

See also
--------

A `complete list`_ of browsers supporting ``X-Frame-Options``.

.. _complete list: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options#browser_compatibility
.. _other clickjacking prevention techniques: https://en.wikipedia.org/wiki/Clickjacking#Prevention
.. _modern browsers: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options#browser_compatibility

0 comments on commit f302343

Please sign in to comment.