Skip to main content
ianomax
ianomax
Explorer II
August 23, 2025
Question

DOM-based extension clickjacking - 1Password browser extension

  • August 23, 2025
  • 3 replies
  • 917 views

Hi Everyone.

I was looking for this problem involving the "1Password browser extension".

Is there a function/method for Forticlient/FortiEMS protected endpoint to catch or block this kind of "Clickjacking"?

 

Thanks in advance.

Max

 

3 replies

Anthony_E
Staff
Anthony_E
Staff
August 26, 2025

Hello Max,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Best Regards
    Jean-Philippe_P
    Staff & Editor
    Jean-Philippe_P
    Staff & Editor
    August 27, 2025

    Hello,

     

    We are still looking for an answer to your question.

     

    We will come back to you ASAP.

     

    Thanks,

    Jean-Philippe - Fortinet Community Team
      Jean-Philippe_P
      Staff & Editor
      Jean-Philippe_P
      Staff & Editor
      August 28, 2025

      Hello again ianomax,

       

      I found this solution. Can you tell me if it helps, please?

       

      FortiClient and FortiClient EMS provide several features that can help protect against clickjacking attacks:

       

      1. Web Filtering: FortiClient's web filtering function monitors web browser activities and enforces web security policies. This can help block access to malicious websites that may be involved in clickjacking.

      2. Application Firewall: The application firewall in FortiClient can monitor, allow, or block application traffic by categories, which can prevent the use of unwanted applications that might be used in clickjacking attacks.

      3. Endpoint Protection: FortiClient offers endpoint protection features, including anti-malware and vulnerability detection, which can help protect against various types of cyberattacks, including clickjacking.

      4. Content Security Policy (CSP) and X-Frame-Options: While not specific to FortiClient, implementing CSP and X-Frame-Options in web applications can prevent clickjacking by controlling how content is embedded in frames.

       

      These features, combined with employee education and awareness, can help mitigate the risk of clickjacking attacks on protected endpoints.

      Jean-Philippe - Fortinet Community Team
        ianomax
        ianomaxAuthor
        Explorer II
        August 28, 2025

        Dear Jean-Philippe,

        thank you for your answer.

        The features are interesting ... however these options should be configured and tested. At present I'm looking for a basic configuration in order to test this kind of risk.

         

        Max

          Jean-Philippe_P
          Staff & Editor
          Jean-Philippe_P
          Staff & Editor
          August 29, 2025

          Hello again ianomax,

           

          I found that answer:

           

          To test and configure basic protection against clickjacking risks using FortiClient and FortiClient EMS, follow these steps:

           

          1. Web Filtering Configuration:
            - Access the FortiClient EMS console.
            - Navigate to the Web Filtering section.
            - Enable web filtering and configure it to block known malicious sites and categories that may host clickjacking attacks.

          2. Application Firewall:
            - In the EMS console, go to the Application Firewall settings.
            - Enable the application firewall and set rules to control application traffic, focusing on blocking unauthorized or suspicious applications.

          3. Endpoint Protection:
            - Ensure that endpoint protection is enabled on all devices.
            - Regularly update the anti-malware definitions to detect and block the latest threats.

          4. Content Security Policy (CSP) and X-Frame-Options:
            - For web applications, implement CSP and X-Frame-Options headers to prevent unauthorized content embedding.
            - This can be configured on the web server hosting the application.

          5. Testing:
            - After configuration, conduct tests using known clickjacking test sites to ensure the protections are effective.
            - Monitor logs and alerts in the EMS console to verify that the configurations are working as intended.

          6. Employee Education: Educate employees about the risks of clickjacking and safe browsing practices.

           

          By following these steps, you can set up a basic configuration to test and mitigate clickjacking risks on your network.

          Jean-Philippe - Fortinet Community Team
            Terms & ConditionsAccessibility statement