DomainLockJS

DomainLockJS: Prevent Clickjacking Attacks

An open-source JavaScript library that prevents other sites from framing your content in iframes, locking your domain to the current page and helping prevent clickjacking attacks.

What is DomainLockJS?

DomainLockJS is an open-source JavaScript library that allows websites to prevent other sites from framing their content in iframes. It helps prevent clickjacking attacks by locking the domain to the current page.

Here is an overview of DomainLockJS:

• Open-source library written in JavaScript
• Very lightweight - less than 1kB when minified and gzipped
• Easy to implement by including the script and calling a single function
• Locks the domain to current page by preventing iframing unless coming from the same origin
• Whitelists domains that are allowed to frame content
• Supports different locking methods like dual-key patterns
• Lets you customize and localize error messages shown to users
• Provides callbacks to react to events like failed lock attempts
• Library actively maintained on GitHub

By leveraging DomainLockJS, websites can protect themselves and their users against malicious clickjacking attempts. The library is easy to use with all major browsers. It offers website owners a simple solution to stay secure from attacks involving iframing content without consent.

DomainLockJS Features

Official Links