Skip to content
whois.me.uk
Menu
Sign in

XFO-MISSING

Pages can be framed by other sites

What it means

Without X-Frame-Options or a frame-ancestors directive, another site can load your pages inside an invisible frame and trick users into clicking (click-jacking).

How to fix it

  1. 1Add X-Frame-Options: DENY (or SAMEORIGIN if you frame your own pages).
  2. 2Or add Content-Security-Policy: frame-ancestors 'none'.

Re-check after the change

DNS changes can take up to the record's TTL to be seen; use Re-run on the result page to bypass our 10-minute cache.