Use X-Frame-Options header to protect against ClickJacking.