Customizable Parameters for Stylesheets for Clickjacking Framing Protection

data-applyProtectionCallback

Empty

This parameter is a function call to determine if a page has to be released.

data-checkDefault

ALLOW

This parameter specifies the default behavior if no rules are available.

Other value: DENY.

data-deniedMessage

This application cannot run in that Frame.

This parameter specifies the message to be displayed in a javascript alert box when the whitelist check fails and the rendering of application is denied.

data-releaseTimeoutMessage

The whitelist service cannot be reached.

This parameter specifies the message to be displayed in a javascript alert box after a timeout, which is configured for 5 sec.

data-styleId

SAP-antiClickjackStyle

This parameter specifies the ID of the element to be removed when releasing the page.

data-whiteList

Empty

This parameter specifies a comma-separated list of hosts for a whitelist passed directly to the script. The lightspeed iHubFrameprotect offers the property WhiteList.