服务端测试

 X-Frame-Options SAMEORIGIN    ClickjackFilterDeny

________________________________________________________________

本地测试

X-Frame-Options Deny          ClickjackFilterDeny

 

 

 

<filter>
<filter-name>ClickjackFilterDeny</filter-name>
<filter-class>org.owasp.filters.ClickjackFilter</filter-class>
<init-param>
<param-name>mode</param-name>
<param-value>DENY</param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>ClickjackFilterDeny</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>