Add X-Frame-Options header to prevent clickjacking

Author: Hironsan

nginx/nginx.conf

@@ -2,6 +2,8 @@ server {
     listen 80;
     charset utf-8;
 
+    add_header X-Frame-Options DENY;
+
     location / {
         root /var/www/html;
         try_files $uri $uri/ /index.html;