X-Frame-Options Header Explained
What the HTTP X-Frame-Options header does and when it's used.
Published October 16, 2026
The X-Frame-Options header controls whether a page can be displayed inside an iframe on another site.
Key points
- "DENY" or "SAMEORIGIN" values help prevent clickjacking attacks