functions.php<\/code> file:<\/p>\n\nadd_filter('wp_anti_clickjack', '__return_false');\n<\/code><\/pre>\n\nTo disable the clickjacking X-Frame-Options HTTP header, use this filter in your theme's functions.php<\/code> file:<\/p>\n\nadd_filter('wp_anti_clickjack_x_frame_options_header', '__return_false');\n<\/code><\/pre>\n\n\n\n- Download the plugin from the WordPress.org repository or your WordPress admin dashboard.<\/li>\n
- Upload the plugin files to the
\/wp-content\/plugins\/wp-anti-clickjack<\/code> directory, or install the plugin through the WordPress admin interface.<\/li>\n- Activate the plugin through the 'Plugins' screen in your WordPress admin.<\/li>\n
- The plugin will automatically add the necessary anti-clickjacking measures to your site.<\/li>\n<\/ol>\n\n\n
\nDoes this plugin affect my site's performance?<\/h3><\/dt>\nNo, WP Anti-Clickjack is designed to have minimal impact on your site's performance. The anti-clickjacking measures are applied efficiently without causing any significant overhead.<\/p><\/dd>\n
Is this plugin compatible with page builders and editors?<\/h3><\/dt>\nYes, WP Anti-Clickjack is compatible with popular page builders and editors such as Elementor, Divi, WPBakery, Thrive Architect, and more. If you encounter any compatibility issues, please contact me for assistance.<\/p><\/dd>\n
Can I customize the anti-clickjacking behavior?<\/h3><\/dt>\nYes, the plugin provides filters that allow you to disable the clickjacking JavaScript and the X-Frame-Options header when needed. You can use these filters in your theme's functions.php<\/code> file to fine-tune the plugin's behavior.<\/p><\/dd>\n\n<\/dl>\n\n\n1.8.0<\/h4>\n\n\n- Tested up to WordPress 6.9<\/li>\n
- Added support for Bricks Builder<\/li>\n
- Added support for Breakdance Builder<\/li>\n
- Added support for Oxygen Builder<\/li>\n
- Added support for Spectra \/ Starter Templates<\/li>\n
- Added support for Gutenberg Full Site Editor (FSE)<\/li>\n
- Fixed bug with referrer host comparison logic<\/li>\n
- Fixed PHP 8+ compatibility issue with parse_url() error handling<\/li>\n
- Fixed JavaScript cross-origin exception when framed by attacker sites<\/li>\n
- Removed deprecated language attribute from script tag<\/li>\n<\/ul>\n\n
1.7.9<\/h4>\n\n\n- Tested up to WordPress 6.5<\/li>\n<\/ul>\n\n
1.7.8<\/h4>\n\n\n- Bug fixes for same origin requests<\/li>\n<\/ul>\n\n
1.7.7<\/h4>\n\n\n- Tested up to WordPress 6.3<\/li>\n
- Bug fix for Elementor Pro site editor<\/li>\n<\/ul>\n\n
1.7.6<\/h4>\n\n\n- Tested up to WordPress 6.2<\/li>\n
- PHP warning bug fix<\/li>\n<\/ul>\n\n
1.7.5<\/h4>\n\n\n- Added support for Avada builder<\/li>\n<\/ul>\n\n
1.7.4<\/h4>\n\n\n- Tested up to WordPress 6.1<\/li>\n<\/ul>\n\n
1.7.3<\/h4>\n\n\n- Tested up to WordPress 6.0<\/li>\n
- Bug fix when using the WP customizer and editing widgets<\/li>\n<\/ul>\n\n
1.7.2<\/h4>\n\n\n- Added support for Divi builder<\/li>\n<\/ul>\n\n
1.7.1<\/h4>\n\n\n- Tested up to WordPress 5.9<\/li>\n<\/ul>\n\n
1.7.0<\/h4>\n\n\n- Added HTTP header X-Frame-Options: SAMEORIGIN to further prevent clickjacking<\/li>\n<\/ul>\n\n
1.6.5<\/h4>\n\n\n- Tested up to WordPress 5.8<\/li>\n<\/ul>\n\n
1.6.4<\/h4>\n\n\n- Tested up to WordPress 5.7<\/li>\n<\/ul>\n\n
1.6.3<\/h4>\n\n\n- Support for Cornerstone Page Builder<\/li>\n<\/ul>\n\n
1.6.2<\/h4>\n\n\n- Support for WPBakery Page Builder<\/li>\n<\/ul>\n\n
1.6.1<\/h4>\n\n\n- Tested up to WordPress 5.6<\/li>\n<\/ul>\n\n
1.6.0<\/h4>\n\n\n- Added filter to disable the anti-clickjack script when needed<\/li>\n
- Tested up to WordPress 5.5<\/li>\n<\/ul>\n\n
1.5.4<\/h4>\n\n\n- Increase WordPress supported version to 5.4<\/li>\n<\/ul>\n\n
1.5.3<\/h4>\n\n\n- Increase WordPress supported version to 5.3<\/li>\n<\/ul>\n\n
1.5.2<\/h4>\n\n\n- Bug fix for PHP warning<\/li>\n<\/ul>\n\n
1.5.1<\/h4>\n\n\n- Increase WordPress supported version to 5.2.2<\/li>\n<\/ul>\n\n
1.5.0<\/h4>\n\n\n- Bug fix when updating plugins\/themes<\/li>\n
- Support for Thrive editor<\/li>\n<\/ul>\n\n
1.4.0<\/h4>\n\n\n- Tested up to 4.8.9 and fixed conflicts with Elementor (if you are having an issue with a specific page builder please contact me)<\/li>\n<\/ul>\n\n
1.3.0<\/h4>\n\n\n- Tested up to 4.8.0<\/li>\n<\/ul>\n\n
1.2.0<\/h4>\n\n\n- Tweaked to add anti-clickjacking script to the admin pages<\/li>\n<\/ul>\n\n
1.1.1<\/h4>\n\n\n- Tested up to 4.7.2<\/li>\n<\/ul>\n\n
1.1<\/h4>\n\n\n- Bug fix causing Customizer.php to refresh constantly<\/li>\n<\/ul>\n\n
1.0<\/h4>\n\n\n- Initial Release<\/li>\n<\/ul>","raw_excerpt":"Protect Your WordPress Site From Clickjacking Attacks by Adding the X-Frame-Options Header and Owasp's Legacy Browser Frame Breaking Script.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ca.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/36586","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ca.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/ca.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/ca.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=36586"}],"author":[{"embeddable":true,"href":"https:\/\/ca.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/someguy9"}],"wp:attachment":[{"href":"https:\/\/ca.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=36586"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/ca.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=36586"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/ca.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=36586"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/ca.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=36586"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/ca.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=36586"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/ca.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=36586"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}