Opportunity · Security

Missing X-Frame-Options / CSP frame-ancestors

Why it matters

Pages that can be framed are vulnerable to clickjacking.

How to fix it

Add X-Frame-Options: SAMEORIGIN or a Content-Security-Policy frame-ancestors directive.

How Crawlune finds it

Crawlune flags Missing X-Frame-Options / CSP frame-ancestors automatically on every crawl and lists the affected URLs under theSecurity tab, where you can filter, inspect each page and export the list to CSV. The free version crawls up to 500 URLs with every check enabled.