X-Frame-Options: DENY prevents clickjacking attacks where a malicious site iframes yours and tricks users into clicking hidden buttons. Modern replacement: Content-Security-Policy frame-ancestors. Set both for safety.
X-Frame-Options: DENY prevents clickjacking attacks where a malicious site iframes yours and tricks users into clicking hidden buttons. Modern replacement: Content-Security-Policy frame-ancestors. Set both for safety.