Prevent

OWASP

HTTP headers security

X-Frame-Options