Comment Comment by astura Doesn't X-Frame-Options in the response header prevent this attack? parent astura 4 years ago