How to Prevent our website by Clickjacking in ASP.NET c#? [duplicate]

Question

I have a Dynamic website in which i have to make secure from clickjacking attack. In database getting these type of values while searching i was know little more about clickjacking but exactly is what not getting so Please anyone who knows help me out.

Answer 1

X-FRAME-Options

Add this code in global.asax file.

protected void Application_BeginRequest(object sender, EventArgs e) {   HttpContext.Current.Response.AddHeader("x-frame-options", "DENY"); } 

OR

simply add this to <system.webServer> in your Web.Config file

<!--Clickjacking security-->     <httpProtocol>       <customHeaders>         <add name="X-Frame-Options" value="DENY" />       </customHeaders>     </httpProtocol>     <!--End clickjacking--> 

This small snippet adds a http header called x-frame-options to your http responses and prevents your site being loaded in an iframe in "modern" browsers.
There are 3 values possible to X-Frame-Options:

1. DENY: do not allow any site to frame your application
2. SAMEORIGIN: only allow same application site to frame
3. ALLOW-FROM: only allow specific domain to frame your application

Answer 2

Try Best-for-now Legacy Browser Frame Breaking Script

One way to defend against clickjacking is to include a "frame-breaker" script in each page that should not be framed. The following methodology will prevent a webpage from being framed even in legacy browsers, that do not support the X-Frame-Options-Header.

In the document HEAD element, add the following:

First apply an ID to the style element itself:

<style id="antiClickjack">body{display:none !important;}</style> 

And then delete that style by its ID immediately after in the script:

<script type="text/javascript">    if (self === top) {        var antiClickjack = document.getElementById("antiClickjack");        antiClickjack.parentNode.removeChild(antiClickjack);    } else {        top.location = self.location;    } </script>