webzod
account

Stop other sites from framing your pages on Shopify

headers.clickjacking.missing · effort: minutes

Why it matters

Without frame-ancestors or X-Frame-Options any site can load your pages in an invisible frame and trick visitors into clicking buttons they cannot see. One header tells browsers which sites, if any, may frame them.

The fix

Not possible on Shopify. Shopify sets the storefront's framing headers itself and stores cannot add X-Frame-Options or frame-ancestors; a meta tag cannot carry frame-ancestors.

Read the documentation (opens in a new tab)

Scan your domain to see whether this applies to you.