HTTP - do not let to embed website in iframe

In this short article, we would like to show you simple configuration that do not let to display your website embedded in frame, iframe, embed and object elements on ther webpages.

Quick solutions (add header to your website response):

X-Frame-Options: DENY

or:

X-Frame-Options: SAMEORIGIN

Where:

• DENY do not lets to built-in website to onwn iframe too.
• SAMEORIGIN lets to built-in website to onwn iframe element, but only if origin for bothh sites will be the same.

See also

• apache2 - do not let to display website embedded in iframe

References

1. X-Frame-Options - MDN Docs