Cross-Frame Scripting protection in SAP ABAP HTTP logon application, SAP security note 2028904 RedRays Team November 26, 2018