DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
Web Security Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
hard
Web Security
A team relies solely on a <meta http-equiv="Content-Security-Policy" content="frame-ancestors 'self'"> tag to prevent clickjacking. What's the actual state of their protection?
A
Fully protected — meta tags work identically to headers
B
Not actually protected against clickjacking at all — frame-ancestors is silently ignored when set via meta tag, with no browser error to signal this
C
Protected, but only in Chrome
D
Over-protected — this blocks more than intended
Check Answer