send_frame_options_header() │ WP 3.1.3

Sends a HTTP header to limit rendering of pages to same origin iframes.

No Hooks.

Returns

null. Nothing (null).

Usage

send_frame_options_header();

Notes

See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/frame-ancestors

Changelog

Since 3.1.3 Introduced.

send_frame_options_header() code WP 7.1

wp-includes/functions.php 
function send_frame_options_header() {
	if ( ! headers_sent() ) {
		header( 'X-Frame-Options: SAMEORIGIN' );
		header( "Content-Security-Policy: frame-ancestors 'self';" );
	}
}