Express middleware to add an X-Frame-Options response header
npm install x-frame-optionsExpress middleware to add an X-Frame-Options response header

The X-Frame-Options header can be used to to indicate whether a browser is allowed to render a page within an element or not.
This is helpful to prevent clickjacking attacks by ensuring your content is not embedded within other sites.
See more here: https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options.
js
var express = require('express')
var app = express()
var xFrameOptions = require('x-frame-options') app.use(xFrameOptions())
app.get('/', function (req, res) {
res.get('X-Frame-Options') // === 'Deny'
})
app.listen(3000)
`Usage
` js
var xFrameOptions = require('x-frame-options')
``Returns an express middleware function. Allows you to specify the value of the header, defaults to 'Deny' for the strongest protection.
npm install x-frame-options --save