X-Frame-Options
Demo<iframe>
X-Frame-Options: SAMEORIGIN
X-Frame-Options: DENY
<object type="text/html">
X-Frame-Options: SAMEORIGIN
X-Frame-Options: DENY
<object type="image/png">
X-Frame-Options: SAMEORIGIN
X-Frame-Options: DENY
<embed type="text/html">
X-Frame-Options: SAMEORIGIN
X-Frame-Options: DENY
<embed type="image/png">
X-Frame-Options: SAMEORIGIN
X-Frame-Options: DENY
<img>
X-Frame-Options: SAMEORIGIN
X-Frame-Options: DENY