SAP Note 2142551 – Whitelist service for Clickjacking Framing Protection in AS ABAP
SAP Note 2389051 – ICF service for Clickjacking Framing Protection is not active
Version 4 from Mar 26, 2019 in English:
Resolution
- Start Transaction SICF.
- Go to default_host-> sap -> public-> bc -> uics.
- Activate service UICS and WHITELIST (which can be located under node UICS).
Standard protection measures against Clickjacking (X-FRAME-OPTIONS header) are not suitable for common NetWeaver integration scenarios.
Therefore SAP is providing a whitelist based framework for NetWeaver technologies.
This framework and its implementation are described in SAP Note 2319727.