🏠 New in Low Baseline Support: X-Frame-Options

July 29, 2015

caniuse · mdn · spec

The X-Frame-Options HTTP header limits where a document may be embedded in an iframe. The X-Frame-Options: SAMEORIGIN header disallows embedding in another origin. The X-Frame-Options: DENY header disallows embedding in any context, regardless of origin.

Source features

• http.headers.X-Frame-Options [mdn]
• http.headers.X-Frame-Options.DENY [mdn]
• http.headers.X-Frame-Options.SAMEORIGIN [mdn]