Internet Engineering Task Force (IETF) D. Ross Request for Comments: 7034 Microsoft Category: Informational T. Gondrom ISSN: 2070-1721 Thames Stanley October 2013 HTTP Header Field X-Frame-Options Abstract To improve the protection of web applications against clickjacking, this document describes the X-Frame-Options HTTP header field, which declares a policy, communicated from the server to the cl
![RFC 7034: HTTP Header Field X-Frame-Options](https://cdn-ak-scissors.b.st-hatena.com/image/square/67912b3a14e90c5c62742ae8605f6c20bc1afac7/height=288;version=1;width=512/https%3A%2F%2Fstatic.ietf.org%2Fdt%2F12.19.0%2Fietf%2Fimages%2Fietf-logo-card.png)