To improve the protection of web applications against clickjacking, this document describes the X-Frame-Options HTTP header field, which declares a policy,…
Read RFC 7034 on the RFC Editor