I have a page where the users can click a link which opens a popup window to start the OAuth connection/flow. However this page is getting flagged by the Checkmarx scanner as a possible "Client Cross Frame Scripting Attack".
Here's what the code on my page looks like
Is this code vulnerable to cross frame scripting? If so, any idea how I can make it more secure?