{"json_modified": "2016-08-15T02:51:13.518129", "uuid": "f5c66a66-0d75-4004-a932-7d9f82da44e1", "title": "X-Frame-Options \u30ec\u30b9\u30dd\u30f3\u30b9\u30d8\u30c3\u30c0", "url": "/ja/docs/Web/HTTP/X-Frame-Options", "tags": ["Necko", "Security", "HTTP", "nginx", "Fixit", "Gecko"], "translations": [{"uuid": "d11cb4f8-8916-4d72-8a96-7484106955a6", "title": "X-Frame-Options", "url": "/en-US/docs/Web/HTTP/Headers/X-Frame-Options", "tags": ["Response Header", "Security", "HAProxy", "HTTP", "nginx", "Gecko"], "summary": "The <code>X-Frame-Options</code> <a href=\"/en-US/docs/Web/HTTP\">HTTP</a> response header can be used to indicate whether or not a browser should be allowed to render a page in a <a href=\"/en-US/docs/Web/HTML/Element/frame\" title=\"&lt;frame&gt; is an HTML element which defines a particular area in which another HTML document can be displayed. A frame should be used within a &lt;frameset&gt;.\"><code>&lt;frame&gt;</code></a>, <a href=\"/en-US/docs/Web/HTML/Element/iframe\" title=\"The HTML Inline Frame Element (&lt;iframe&gt;) represents a nested browsing context, effectively embedding another HTML page into the current page. In HTML 4.01, a document may contain a head and a body or a head and a frameset, but not both a body and a frameset. However, an &lt;iframe&gt; can be used within a normal document body. Each browsing context has its own session history and active document. The browsing context that contains the embedded content is called the parent browsing context. The top-level browsing context (which has no parent) is typically the browser window.\"><code>&lt;iframe&gt;</code></a> or <a href=\"/en-US/docs/Web/HTML/Element/object\" title=\"The&#xA0;HTML Embedded Object Element&#xA0;(&lt;object&gt;) represents an external resource, which can be treated as an image, a nested browsing context, or a resource to be handled by a plugin.\"><code>&lt;object&gt;</code></a>\u00a0. Sites can use this to avoid <a href=\"https://en.wikipedia.org/wiki/clickjacking\" title=\"clickjacking\">clickjacking</a> attacks, by ensuring that their content is not embedded into other sites.", "localization_tags": [], "locale": "en-US", "last_edit": "2016-07-28T06:05:38", "review_tags": []}, {"uuid": "f80c447e-8e9c-4b7d-af0b-87fc25aa9d18", "title": "Nag\u0142\u00f3wek odpowiedzi X-Frame-Options", "url": "/pl/docs/HTTP/X-Frame-Options", "tags": ["X-Frame-Options"], "summary": "Nag\u0142\u00f3wek odpowiedzi <a href=\"/pl/HTTP\" title=\"pl/HTTP\">HTTP</a> o nazwie X-Frame-Options s\u0142u\u017cy do wskazania przegl\u0105darce czy powinna by\u0107 w stanie wy\u015bwietla\u0107 zawarto\u015b\u0107 strony w ramce (elementy <a href=\"/pl/docs/HTML/Element/frame\" title=\"This article hasn't been written yet. Please consider contributing!\"><code>&lt;frame&gt;</code></a> i <a href=\"/pl/docs/HTML/Element/iframe\" title=\"This article hasn't been written yet. Please consider contributing!\"><code>&lt;iframe&gt;</code></a>). Witryny mog\u0105 korzysta\u0107 z tego mechanizmu do ochrony przed atakami typu clickjacking, zyskuj\u0105c pewno\u015b\u0107, \u017ce ich zawarto\u015b\u0107 nie b\u0119dzie umieszczona wewn\u0105trz innych witryn.", "localization_tags": [], "locale": "pl", "last_edit": "2013-04-28T11:57:36", "review_tags": []}, {"uuid": "fa6b003d-12da-4e88-b762-4594dd1591c3", "title": "X-Frame-Options \u54cd\u5e94\u5934", "url": "/zh-CN/docs/Web/HTTP/X-Frame-Options", "tags": [], "summary": "<span style=\"line-height: 1.5;\">X-Frame-Options </span><a href=\"/en/HTTP\" style=\"line-height: 1.5;\" title=\"en/HTTP\">HTTP</a><span style=\"line-height: 1.5;\"> \u54cd\u5e94\u5934\u662f\u7528\u6765\u7ed9\u6d4f\u89c8\u5668<span style=\"line-height: 1.5;\">\u6307\u793a</span>\u5141\u8bb8\u4e00\u4e2a\u9875\u9762<span style=\"line-height: 1.5;\">\u53ef\u5426</span>\u5728 <a href=\"/zh-CN/docs/Web/HTML/Element/frame\" title=\"This article hasn't been written yet. Please consider contributing!\"><code>&lt;frame&gt;</code></a>, <a href=\"/zh-CN/docs/Web/HTML/Element/iframe\" title=\"HTML\u4e2d\u7684&lt;iframe&gt;\u6807\u7b7e\uff08\u53c8\u79f0\u5185\u8054\u6846\u67b6\u5143\u7d20\uff09\u8868\u793a\u4e86\u4e00\u4e2a\u5d4c\u5957\u7684\u6d4f\u89c8\u4e0a\u4e0b\u6587(browsing context)\uff0c\u5b9e\u9645\u4e0a\u662f\u7528\u6765\u5728\u5f53\u524d\u9875\u9762\u4e2d\u5185\u5d4c\u53e6\u4e00\u4e2aHTML\u9875\u9762\u3002\u5728HTML4.0.1\u4e2d\uff0c\u6587\u6863(document)\u53ef\u4ee5\u5305\u542b\u4e00\u4e2ahead\u548c\u4e00\u4e2abody\u7ec4\u5408\u6216\u8005\u5305\u542b\u4e00\u4e2ahead\u548c\u4e00\u4e2a\u6846\u67b6\u96c6(frame-set)\u7ec4\u5408,\u4f46\u4e0d\u80fd\u540c\u65f6\u5305\u542bbody\u548cframe-set\u3002\u7136\u800c&lt;iframe&gt;\u6807\u7b7e\u53ef\u4ee5\u63d2\u5165\u5230\u4e00\u4e2a\u6b63\u5e38\u7684\u6587\u6863\u4f53\u4e2d(document body)\u3002\u6bcf\u4e2a\u6d4f\u89c8\u4e0a\u4e0b\u6587(browsing context)\u90fd\u6709\u81ea\u5df1\u7684\u4f1a\u8bdd\u5386\u53f2\u548c\u6d3b\u52a8\u6587\u6863\u3002\u5305\u542b\u5176\u5b83\u5d4c\u5165\u5185\u5bb9\u7684\u6d4f\u89c8\u4e0a\u4e0b\u6587(browsing context)\u79f0\u4f5c\u7236\u7ea7\u6d4f\u89c8\u4e0a\u4e0b\u6587(parent\u00a0browsing context)\u3002\u9876\u5c42\u7684(top-level)\u6d4f\u89c8\u4e0a\u4e0b\u6587(\u4e0d\u518d\u62e5\u6709\u7236\u7a97\u4f53\u7684)\u4e00\u822c\u5c31\u662f\u6d4f\u89c8\u5668\u7684window\u5bf9\u8c61\u3002\"><code>&lt;iframe&gt;</code></a> \u6216\u8005 <a href=\"/zh-CN/docs/Web/HTML/Element/object\" title=\"HTML &lt;object&gt; \u5143\u7d20\uff08\u6216\u8005\u79f0\u4f5c HTML \u5d4c\u5165\u5bf9\u8c61\u5143\u7d20\uff09\u8868\u793a\u4e00\u4e2a\u5916\u90e8\u8d44\u6e90\uff0c\u53ef\u80fd\u662f\u4e00\u5f20\u56fe\u7247\uff0c\u4e00\u4e2a\u5d4c\u5165\u7684\u6d4f\u89c8\u4e0a\u4e0b\u6587\uff0c\u6216\u8005\u4e00\u4e2a\u63d2\u4ef6\u6240\u4f7f\u7528\u7684\u8d44\u6e90\u3002\"><code>&lt;object&gt;</code></a> \u4e2d\u5c55\u73b0\u7684\u6807\u8bb0\u3002\u7f51\u7ad9\u53ef\u4ee5\u4f7f\u7528\u6b64\u529f\u80fd\uff0c\u6765\u786e\u4fdd\u81ea\u5df1\u7f51\u7ad9\u7684\u5185\u5bb9\u6ca1\u6709\u88ab\u5d4c\u5230\u522b\u4eba\u7684\u7f51\u7ad9\u4e2d\u53bb\uff0c\u4e5f\u4ece\u800c\u907f\u514d\u4e86\u70b9\u51fb\u52ab\u6301 (clickjacking) \u7684\u653b\u51fb\u3002</span>", "localization_tags": [], "locale": "zh-CN", "last_edit": "2014-12-19T20:46:07", "review_tags": []}, {"uuid": "62c216e4-b3be-48fd-be95-f055975a9878", "title": "X-Frame-Options \u56de\u61c9\u6a19\u982d", "url": "/zh-TW/docs/HTTP/X-Frame-Options", "tags": [], "summary": "<span style=\"line-height: 1.5;\">X-Frame-Options </span><a href=\"/en/HTTP\" style=\"line-height: 1.5;\" title=\"en/HTTP\">HTTP</a><span style=\"line-height: 1.5;\">\u00a0\u56de\u61c9\u6a19\u982d (header) \u7528\u4f86\u6307\u793a\u6587\u4ef6\u662f\u5426\u80fd\u5920\u8f09\u5165\u00a0<a href=\"/zh-TW/docs/Web/HTML/Element/frame\" title=\"This article hasn't been written yet. Please consider contributing!\"><code>&lt;frame&gt;</code></a>, <a href=\"/zh-TW/docs/Web/HTML/Element/iframe\" title=\"This article hasn't been written yet. Please consider contributing!\"><code>&lt;iframe&gt;</code></a> \u4ee5\u53ca\u00a0<a href=\"/zh-TW/docs/Web/HTML/Element/object\" title=\"This article hasn't been written yet. Please consider contributing!\"><code>&lt;object&gt;</code></a>\uff0c\u7db2\u7ad9\u53ef\u4ee5\u5229\u7528\u00a0</span><span style=\"line-height: 19.0909080505371px;\">X-Frame-Options \u4f86\u78ba\u4fdd\u672c\u8eab\u5167\u5bb9\u4e0d\u6703\u906d\u60e1\u610f\u5d4c\u5165\u9053\u5176\u4ed6\u7db2\u7ad9\u3001\u907f\u514d\u00a0</span><span style=\"line-height: 1.5;\">clickjacking \u653b\u64ca</span>", "localization_tags": [], "locale": "zh-TW", "last_edit": "2015-07-01T02:06:09", "review_tags": []}], "modified": "2016-08-15T02:51:13", "label": "X-Frame-Options \u30ec\u30b9\u30dd\u30f3\u30b9\u30d8\u30c3\u30c0", "localization_tags": [], "locale": "ja", "id": 2766, "last_edit": "2016-08-15T02:50:45", "summary": "X-Frame-Options <a href=\"/ja/HTTP\" title=\"ja/HTTP\">HTTP</a> \u30ec\u30b9\u30dd\u30f3\u30b9\u30d8\u30c3\u30c0\u306f\u3001\u30d6\u30e9\u30a6\u30b6\u304c\u30da\u30fc\u30b8\u3092 <a href=\"/ja/docs/Web/HTML/Element/frame\" title=\"&lt;frame&gt; &#x306F;&#x3001;&#x5225;&#x306E; HTML &#x30C9;&#x30AD;&#x30E5;&#x30E1;&#x30F3;&#x30C8;&#x3092;&#x8868;&#x793A;&#x3067;&#x304D;&#x308B;&#x500B;&#x3005;&#x306E;&#x9818;&#x57DF;&#x3092;&#x5B9A;&#x7FA9;&#x3059;&#x308B; HTML &#x8981;&#x7D20;&#x3067;&#x3059;&#x3002;frame &#x8981;&#x7D20;&#x306F; &lt;frameset&gt; &#x306E;&#x5185;&#x90E8;&#x3067;&#x4F7F;&#x7528;&#x3057;&#x307E;&#x3059;&#x3002;\"><code>&lt;frame&gt;</code></a> \u307e\u305f\u306f <a href=\"/ja/docs/Web/HTML/Element/iframe\" title=\"HTML &#x30A4;&#x30F3;&#x30E9;&#x30A4;&#x30F3;&#x30D5;&#x30EC;&#x30FC;&#x30E0;&#x8981;&#x7D20; (&lt;iframe&gt;) &#x306F;&#x3001;&#x30D6;&#x30E9;&#x30A6;&#x30B8;&#x30F3;&#x30B0;&#x30B3;&#x30F3;&#x30C6;&#x30AD;&#x30B9;&#x30C8; (browsing context) &#x306E;&#x5165;&#x308C;&#x5B50;&#x3092;&#x8868;&#x73FE;&#x3057;&#x3001;&#x4E8B;&#x5B9F;&#x4E0A;&#x73FE;&#x5728;&#x306E;&#x30DA;&#x30FC;&#x30B8;&#x306B;&#x4ED6;&#x306E; HTML &#x30DA;&#x30FC;&#x30B8;&#x3092;&#x57CB;&#x3081;&#x8FBC;&#x3080;&#x3053;&#x3068;&#x304C;&#x3067;&#x304D;&#x307E;&#x3059;&#x3002;HTML 4.01 &#x3067;&#x306F;&#x3001;&#x6587;&#x66F8;&#x306F; head &#x304A;&#x3088;&#x3073; body&#x3001;&#x307E;&#x305F;&#x306F; head &#x304A;&#x3088;&#x3073; frame-set &#x3092;&#x6301;&#x3064;&#x3053;&#x3068;&#x304C;&#x3067;&#x304D;&#x3001;body &#x3068; frame-set &#x306E;&#x4E21;&#x65B9;&#x306F;&#x6301;&#x3061;&#x307E;&#x305B;&#x3093;&#x3002;&#x3057;&#x304B;&#x3057;&#x3001;&lt;iframe&gt; &#x306F;&#x901A;&#x5E38;&#x306E;&#x6587;&#x66F8; body &#x5185;&#x3067;&#x4F7F;&#x7528;&#x3067;&#x304D;&#x307E;&#x3059;&#x3002;&#x30D6;&#x30E9;&#x30A6;&#x30B8;&#x30F3;&#x30B0;&#x30B3;&#x30F3;&#x30C6;&#x30AD;&#x30B9;&#x30C8;&#x306F;&#x305D;&#x308C;&#x305E;&#x308C;&#x3001;&#x30BB;&#x30C3;&#x30B7;&#x30E7;&#x30F3;&#x5C65;&#x6B74;&#x3068;&#x30A2;&#x30AF;&#x30C6;&#x30A3;&#x30D6;&#x306A;&#x6587;&#x66F8;&#x3092;&#x6301;&#x3061;&#x307E;&#x3059;&#x3002;&#x57CB;&#x3081;&#x8FBC;&#x307F;&#x30B3;&#x30F3;&#x30C6;&#x30F3;&#x30C4;&#x3092;&#x542B;&#x3080;&#x5074;&#x306E;&#x30D6;&#x30E9;&#x30A6;&#x30B8;&#x30F3;&#x30B0;&#x30B3;&#x30F3;&#x30C6;&#x30AD;&#x30B9;&#x30C8;&#x3092;&#x3001;&#x89AA;&#x30D6;&#x30E9;&#x30A6;&#x30B8;&#x30F3;&#x30B0;&#x30B3;&#x30F3;&#x30C6;&#x30AD;&#x30B9;&#x30C8;&#x3068;&#x547C;&#x3073;&#x307E;&#x3059;&#x3002;&#x30C8;&#x30C3;&#x30D7;&#x30EC;&#x30D9;&#x30EB;&#x306E;&#x30D6;&#x30E9;&#x30A6;&#x30B8;&#x30F3;&#x30B0;&#x30B3;&#x30F3;&#x30C6;&#x30AD;&#x30B9;&#x30C8;&#xFF08;&#x89AA;&#x3092;&#x6301;&#x3061;&#x307E;&#x305B;&#x3093;&#xFF09;&#x306F;&#x901A;&#x5E38;&#x30D6;&#x30E9;&#x30A6;&#x30B6;&#x30A6;&#x30A3;&#x30F3;&#x30C9;&#x30A6;&#x3067;&#x3059;&#x3002;\"><code>&lt;iframe&gt;</code></a> \u306e\u5185\u90e8\u306b\u8868\u793a\u3059\u308b\u3053\u3068\u3092\u8a31\u53ef\u3059\u308b\u304b\u3092\u793a\u3059\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u30b5\u30a4\u30c8\u306f\u3053\u306e\u30ec\u30b9\u30dd\u30f3\u30b9\u30d8\u30c3\u30c0\u3092\u3001\u30af\u30ea\u30c3\u30af\u30b8\u30e3\u30c3\u30ad\u30f3\u30b0\u653b\u6483\u3092\u9632\u6b62\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u3053\u308c\u306f\u3001\u81ea\u5206\u306e\u30b5\u30a4\u30c8\u306e\u30b3\u30f3\u30c6\u30f3\u30c4\u304c\u4ed6\u306e\u30b5\u30a4\u30c8\u306b\u57cb\u3081\u8fbc\u307e\u308c\u306a\u3044\u3068\u4fdd\u8a3c\u3059\u308b\u3053\u3068\u306b\u3088\u308a\u307e\u3059\u3002", "sections": [{"id": "Using_X-Frame-Options", "title": "X-Frame-Options \u3092\u7528\u3044\u308b"}, {"id": "Configuring_Apache", "title": "Apache \u306e\u8a2d\u5b9a"}, {"id": "Configuring_nginx", "title": "nginx \u306e\u8a2d\u5b9a"}, {"id": "Results", "title": "\u7d50\u679c"}, {"id": "Browser_compatibility", "title": "\u30d6\u30e9\u30a6\u30b6\u5b9f\u88c5\u72b6\u6cc1"}, {"id": "See_also", "title": "\u95a2\u9023\u60c5\u5831"}], "slug": "Web/HTTP/X-Frame-Options", "review_tags": []}