The X-Frame-Options HTTP response header tells browsers whether to allow an HTML document to be rendered in iframe element or frame element in HTML documents at other origins.
The X-Frame-Options HTTP response header tells browsers whether or not to allow an HTML document to be rendered in iframe elements or frame elements in HTML documents at other origins. Sites can use X-Frame-Options to avoid clickjacking attacks, by ensuring that their content is not embedded into other sites.
See https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options
