undefined | Better HN

0 pointsiAMkenough1y ago0 comments

How do I set this in a shared hosting environment like GoDaddy?

0 comments

You can set a CSP in the HTML head section using a meta http-equiv tag. It has similar functionality to X-frame-options IIRC.

lelandfe1y ago

Alas, no. ‘frame-ancestors’ does not work in meta. There is no reliable way to prevent click jacking if you are just editing the HTML. That makes sense: in order for these meta directives to even be enacted the HTML will have already begun to download and be parsed.

The old school way is comparing the top level URL with JS and redirecting but there are ways to deal with that

j / k navigate · click thread line to collapse

0 comments

rubendev1y ago

You can set a CSP in the HTML head section using a meta http-equiv tag. It has similar functionality to X-frame-options IIRC.

lelandfe1y ago

The old school way is comparing the top level URL with JS and redirecting but there are ways to deal with that

j / k navigate · click thread line to collapse