ClickJacking vulnerability in WDA

[aaron_morden2]

I noticed that there is Note 1781171 that addresses ClickJacking vulnerability in Web Dynpro Java, but I couldn't find anything that deals with Web Dynpro ABAP.  Does anyone know of a way to handle this for WDA?  Thanks.

[Former Member · Accepted solution]

Hi,

Currently our development team is working hard on the clickjacking protection for WDA and there is a note already created but not released yet. (note 2183535)

Please wait until this note will be released.

Best regards,

Gabor

[aaron_morden2 · Accepted solution]

The note has been released and it does not mention clickjacking.  Was it put in a different note?

[aaron_morden2 · Accepted solution]

Found these notes that address the issue.

2319727 - Clickjacking protection framework in SAP Netweaver AS ABAP and AS Java

1872800 - Whitelist based Clickjacking Framing Protection in Web Dynpro ABAP

[Former Member · Accepted solution]

Hi,

Sorry, I pasted the wrong note number here...

But Aaron found the correct notes. Thanks!

Thanks,

Gabor

[aaron_morden2]

Thank you!