X-Frame-OptionsThe X-Frame-Options HTTP header limits where a document may be embedded in an iframe. The X-Frame-Options: SAMEORIGIN header disallows embedding in another origin. The X-Frame-Options: DENY header disallows embedding in any context, regardless of origin.securitySecuritywidely2015-07-292018-01-29https://html.spec.whatwg.org/multipage/speculative-loading.html#the-x-frame-options-headerhttps://developer.mozilla.org/docs/Web/HTTP/Reference/Headers/X-Frame-Optionshttp.headers.X-Frame-Optionshttp.headers.X-Frame-Options.DENYhttp.headers.X-Frame-Options.SAMEORIGINhttps://nowyoucanuse.com/features--x-frame-options.html