Web Penetration Testing - X Frame Options Header

Clickjacking Attacks: Techniques and Mitigation

Security Headers for Web Applications: Best Practices