#clickjacking

Security Headers

Clickjacking & X-Frame-Options: stop your site being framed

Clickjacking loads your real site inside an invisible frame so users click things they cannot see. The defense is one header — here is how to set it right.