Skip to content
mistakes.show
793Kissues on 68,769 sites
mistakes.show
Get in touch
  1. Home
  2. Mistakes
  3. No clickjacking protection
SecurityImportant

No clickjacking protection

Neither X-Frame-Options nor CSP frame-ancestors is set, so the site can be framed by others.

50%of Global websites

By market

  1. Global50%
  2. United Kingdom43%
  3. Netherlands46%
  4. Italy58%
  5. Spain52%
  6. Japan59%
  7. Latin America55%

How to fix

  1. 1Add X-Frame-Options: SAMEORIGIN, or
  2. 2use Content-Security-Policy: frame-ancestors 'self'.

Related mistakes

Our crawler: 68,769 sites · Global · updated Oct 23, 2026 · Methodology

Found mistakes on your site?

We can fix them in one sprint. Reply within one business day.

Get in touchServices