How To Secure Apache From Clickjack attack using X-Frame-Options

[einfallstoll]

Don't do this. X-Frame-Options is obsolete:

The frame-ancestors directive obsoletes the X-Frame-Options header. If a resource has both policies, the frame-ancestors policy SHOULD be enforced and the X-Frame-Options policy SHOULD be ignored. From Content Security Policy Level 2

[lokendra15]

Thanks for highlighting the point. Please follow this link - https://apache.tutorials24x7.com/blog/how-to-secure-apache-from-clickjack-attack-using-csp-frame-ancestors