<meta http-equiv="X-XSS-Protection" content="1">
<meta http-equiv="X-FRAME-OPTIONS" content="SAMEORIGIN">
Header set X-XSS-Protection "1; mode=block"
Header set X-Frame-Options SAMEORIGIN
<meta http-equiv="X-XSS-Protection" content="1">
<meta http-equiv="X-FRAME-OPTIONS" content="SAMEORIGIN">
Header set X-XSS-Protection "1; mode=block"
Header set X-Frame-Options SAMEORIGIN