Clickjacking is an attack where a user is misled into clicking on an invisible web page element
This attack involves a hacker appending untrusted data to the HTML response.
This information divulges details about the server, making it susceptible to exploitation by attackers.
Recognizing this vulnerability provides attackers with insight to potentially exploit other existing vulnerabilities.
CORS is a mechanism based on HTTP headers that permits a server to specify which origins (domains, schemes, or ports) are allowed to access its resources.
A disclaimer regarding cookies.
Ensures that a web browser refrains from transmitting cookies if the connection is solely established over HTTP.