Ulac URL i d-yulin
0 / 0

Senteḍ URLs deg ugalis adisan akken ad tebduḍ

Sit ɣef S i usnifal n ugalis  ·  ? i tallelt
Asmel-a izmer ad yeḥbes asekcem deg iframe. Asebter izmer ad d-iban d ilmawen.

Tallelt & Asellek n wuguren
Ayɣer kra n yismal web ur d-ttladin ara
Ayɣer asebter d ilmawen?

Aṭas n yismal web ḥebsen asekcem deg iframe s yiqerray HTTP. D tamahilt n tɣellist i yettaḥerzen mgal clickjacking.

⚠ Amek iteddu usweḥ

Ismal web ttaznen iqerray i yinig-ik: «Ur yi-sekcem ara.» Inig iṭṭef leɛhed → iframe d ilmawen.

AqerruAsemdu
X-Frame-Options: DENYIḥebs akk
X-Frame-Options: SAMEORIGINTaɣult-nni kan
CSP: frame-ancestors 'none'Asweḥ atraran
Amṣada
AsmelAddad
Google, Gmail, GitHubYettusweḥ
Facebook, X / TwitterYettusweḥ
WikipediaAzgen
Ismal-ik webIteddu ✓
Ifecka igensanen / TifelwiyinIteddu ✓
Ismal usbiḍen / IsemligenIteddu ✓
Eg ismal-ik ad tteddun
✓ Iwulmen

Sbadu frame-ancestors akken ad teǧǧeḍ kan walkurls.com.

Apache (.htaccess)
Header set Content-Security-Policy "frame-ancestors 'self' https://walkurls.com"
Header unset X-Frame-Options
Nginx
add_header Content-Security-Policy "frame-ancestors 'self' https://walkurls.com";
Node.js / Express
app.use((req, res, next) => {
  res.setHeader('Content-Security-Policy',
    "frame-ancestors 'self' https://walkurls.com");
  res.removeHeader('X-Frame-Options');
  next();
});
PHP
header("Content-Security-Policy: frame-ancestors 'self' https://walkurls.com");
header_remove("X-Frame-Options");
Vercel (vercel.json)
{
  "headers": [{
    "source": "/(.*)",
    "headers": [{
      "key": "Content-Security-Policy",
      "value": "frame-ancestors 'self' https://walkurls.com"
    }]
  }]
}
Netlify (_headers)
/*
  Content-Security-Policy: frame-ancestors 'self' https://walkurls.com
Aɛraḍ

Ldi DevTools F12 → Console. Ma yettusweḥ:

Refused to display 'https://...' in a frame
because it set 'X-Frame-Options' to 'deny'.

Senqed iqerray s terminal:

curl -I https://your-site.com | grep -i "frame\|content-security"
Taɣellist
⚠ Ur seqdac ara frame-ancestors * deg ufares

Ḍmen lebda: https://walkurls.com

Inegzumen n unasiw
← →Win yezrin / Win d-iteddun
SpaceSnifel taɣuri tawurmant
Home EndAmezwaru / Aneggaru
SSnifel agalis adisan
FAgdil ačuran
?Agalis-a n tallelt