Security
What is X-Frame-Options?
X-Frame-Options prevents your site from being embedded in iframes on other sites, protecting against clickjacking.
X-Frame-Options is an HTTP header preventing your site from loading in unauthorized iframes.
Values
- ●
DENY: Never in an iframe - ●
SAMEORIGIN: Only from your domain
SEO Impact
Protects against clickjacking. No direct SEO impact, but strengthens overall security.
Related Terms
What is Mixed Content?
Mixed content occurs when an HTTPS page loads resources via insecure HTTP.
What is HSTS?
HSTS forces browsers to only use HTTPS to access your site, preventing downgrade attacks.
What is Content-Security-Policy?
CSP is a security header that controls which resources can be loaded on your page, protecting against XSS attacks.
What is Referrer-Policy?
Referrer-Policy controls what referrer information is shared when a user clicks an outbound link.