Jump to content

Preventing Clickjacking and Writing Code to Prevent Clickjacking

By maryt6886, in Customize with code

Go to solution Solved by paul2009,

Recommended Posts

maryt6886 Level 2

maryt6886

Posted
Posted

Site URL: http://thecoalyardcafe

We are a small cafe that uses TSYS to accept credit card payments from customers and our web page was created through Squarespace.  Every quarter, we are subjected to TSYS PCI compliance to ensure that our credit card system is secure.  For the very first time, we did not pass compliance this quarter because our website is vulnerable to "clickjacking."  I am not a web designer or programmer so I do not know how to go about fixing this problem.  I read several online blogs and watched a number of Youtube videos and if I understand correctly, I need to write some code that says, "X-Frame-Options-Deny" or "X-Frame-Options-Sameorigin" for each of the links I have in our webpage (history, drinks, entrees, and anywhere else you can link on the webpage).  What are the steps to write code in a Squarespace webpage/domain?  Is anyone familiar with "clickjacking" and can help us resolve this problem?  We would greatly appreciate it.  Thanks!   

Link to comment
  • Replies 2
  • Views 465
  • Created
  • Last Reply

Top Posters In This Topic

Popular Days

Top Posters In This Topic

Popular Days

Popular Posts

paul2009
paul2009

I don't fully understand your question because Squarespace websites do not require independent PCI compliance testing and their sites do not use TSYS for payment processing. Can you explain a lit

  • Solution
paul2009 Level 18

paul2009

Posted
  • Solution
Posted
1 hour ago, maryt6886 said:

We are a small cafe that uses TSYS to accept credit card payments from customers and our web page was created through Squarespace. For the very first time, we did not pass compliance this quarter because our website is vulnerable to "clickjacking."

I don't fully understand your question because Squarespace websites do not require independent PCI compliance testing and their sites do not use TSYS for payment processing.

Can you explain a little more? Are you taking orders via the website?

Regarding clickjack protection, this can be enabled in Settings > Advanced > Website Protection. This setting protects your site and visitors from UI redress attacks (also known as clickjacking), which are attempts to trick visitors into clicking a link that takes action on another, hidden site.

About me: I've been a SQSP User for 18 yrs. I was invited to join the Circle when it launched in 2016. I have been a Circle Leader since 2017. I don't work for Squarespace. I value honesty, transparency, diversity and good design ♥.
Work: I founded and run SF.DIGITAL, building Squarespace Extensions to supercharge your commerce website. 
Content: Views and opinions are my own. Links in my posts may refer to SF.DIGITAL products or may be affiliate links.
Forum advice is free. You can thank me by clicking one of the feedback emojis below. Coffee is optional.

Link to comment
  • 4 months later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Sign Up / Login
Go to topic listing

News

×
×
  • Create New...

Squarespace Webinars

Free online sessions where you’ll learn the basics and refine your Squarespace skills.

Upcoming Webinars →

Hire a Designer

Stand out online with the help of an experienced designer or developer.

Get Matched →

Support

Community

Developers

Resources