1?? ???? ???????? ? iframe
??? X-Frame-Options - ???? ????? ??????? ? iframe ?? ????? ??????
??? ?????? ?? ??????? ?????????? ??????? ? ????????
2?? ???????? ?????
- 1?????? ??????? ?? https://evil-p2p.com
- 2? iframe ??????????? zyxor-pay.com/balance (??? XFO)
- 3?????? ?????? "?????????" - ?????????? ???? ??????????????
- 4?????? ???????? "?????????" ? ?? ????? ???? ??? ?????? ??????????????
- 5????????????? ???????? getUserMedia({video:true})
- 6???????: "zyxor-pay.com ??????????? ??????" ? ?????? ???????? ? ?????????
- 7?? ???? ? ?????? ?????? ?? ?????? ??????????
3?? ?????? ? API ?????????
??? Permissions-Policy - ??? API ????????:
? ????????...
? ??????????? (??? ????????? ?????)
???????? ? Zoraxy ? Advanced ? Custom Headers ? Response Headers:
X-Frame-Options: DENY
Permissions-Policy: geolocation=(), camera=(), microphone=(), accelerometer=(), gyroscope=()
Content-Security-Policy: default-src 'self' https://*.supabase.co https://fonts.googleapis.com https://fonts.gstatic.com; frame-ancestors 'none'