X-Frame-Options

X-Frame-Options: value DENY: The page cannot be displayed in a frame, regardless of the site attempting to do so. SAMEORIGIN: The page can only be displayed in a frame on the same origin as the page itself. ALLOW-FROM URI: The page can only be displayed in a frame on the specified origin.