4 ms·

Sites can already send an 'X-Frame-Options: deny' header to prevent being framed.

• lol768 8y ago
  Or use CSPv2's frame-ancestors.