How to disable clickjacking in new universal login page in auth0

Question

I have application which renders auth0 login in an iframe using classic universal page. However, I want to switch to new universal login page but want to disable clicjacking feature.

Is there any way to disable clickjacking in new universal login page?

Thanks.

Answer 1

as per Auth0 documentation

in the classic flow: set the following HTTP headers

X-Frame-Options: deny Content-Security-Policy: frame-ancestors 'none'

in the new universal flow:

The following action is not required if you are using the New Universal Login Experience because those headers are always set in that case