I need a little guidance as I have a vulnerability in my apache webserver Click Jacking. In all the pages I have read I had to modify the htaccess but I do not find it on my server either VirtualHost and httpd.conf contains only comments not configuration so I do not know where this file is if it may not have it or if someone can help me with this problem, thank you!
You can use X-Frame-Options to prevent your page from being loaded by frames. This should prevent most clickjacking attacks.
You do this by setting X-Frame-Options: DENY
in your header, or if you want to allow frames within your own site, you can set it to X-Frame-Options: SAMEORIGIN
. If you want to whitelist a site, try X-Frame-Options: ALLOW-FROM https://example.com/