Check library
Security HeadersTypical severity · Medium
Clickjacking protection
Frame controls reduce the risk of a site being embedded in a deceptive interface.
What Chalo checks
Chalo accepts either X-Frame-Options or a CSP frame-ancestors directive.
Passing signal
A restrictive X-Frame-Options or frame-ancestors policy is present.
Failing signal
Neither control is returned by the page.
How to fix it
Prefer CSP frame-ancestors; retain X-Frame-Options when older browser support matters.
Example configuration
Content-Security-Policy: frame-ancestors 'none'