Using Frameworks Which Support Clickjacking Framing Protection

Applications which run on SAP NetWeaver AS for Java and are built in following frameworks do not need to adapt anything. Clickjacking framing protection is enabled by the framework automatically.

Context

SAP NetWeaver AS for Java supports clickjacking framing protection for the following frameworks:

Web Dynpro Java
Java Server Pages (JSP)
Enterprise Portal (iViews)

Procedure

The administrator needs to maintain the whitelist for clickjacking framing protection, where your applications are deployed.

In addition, depending on the framework, there may be additional steps an administrator needs to take.

For more information, see the security guide for the framework.