XFrameOptions

With X-Frame-Options: DENY

With X-Frame-Options: SAMEORIGIN

With using CSP instead

Content-Security-Policy: frame-ancestors 'none';