Frameprevention

This module prevents your site from being framed by another one by adding a Javascript frame buster (also known as a frame breaker) to your site.

Breaking out of frames helps add another layer of clickjacking prevention for secure environments like shopping carts.

Frameprevention supports the X-Frame-Options HTTP response header values of SAMEORIGIN and DENY and/or a Javascript and CSS-based method to break out of frames.

Specific paths can be excluded in the module configuration to allow framing.

For more sophisticated security concerns, Security Kit is a more advanced solution.