I want to secure my web application against clickjacking attacks. What HTML or HTTP headers, such as X-Frame-Options or Content-Security-Policy, can I use to prevent clickjacking? Are there browser compatibility considerations to keep in mind?
Best practices for implementing clickjacking prevention in HTML would be appreciated.