X-Frame-Options — X-Frame-Options is a header that controls whether other websites may show a site’s pages inside their own frames. Blocking framing prevents clickjacking, where a fake site overlays a real one to trick people. The SAMEORIGIN setting lets a site frame its own pages only. It is an easy, safe security improvement.

Added October 21, 2026