Kazap TechnologiesYLB ScoreYour Local Business Score

YLB Score › The checks, explained › Part III, Will a stranger trust you?

Your pages can be shown inside somebody else's site

A scam site could show your page inside its own frame and trick a visitor into clicking things they cannot see. One setting refuses to be framed.

One line.

Worth about 1 point of your 100 for a typical businessAbout 1 hour, by your web person

See for yourself

securityheaders.com lists X-Frame-Options.

How to fix it

  1. Have your web person add the setting, or the frame-ancestors rule in the policy above.
The technical version, for your web person

X-Frame-Options. The header, or a frame-ancestors directive in the CSP. Either earns the mark.

What the check reads. Presence of X-Frame-Options, or frame-ancestors inside the CSP.

This is one of the checks in a YLB Score report. Every report is free, read by a person before it goes out, and written so that you can act on it without us. Ask for yours.