X-Frame-Options header

X-Frame-Options allows content publishers to prevent their own content from being used in an invisible frame by attackers. The DENY option is the most secure, preventing any use of the current page in a frame. More commonly, SAMEORIGIN is used.

X-Frame-Options allows content publishers to prevent their own content from being used in an invisible frame by attackers. The DENY option is the most secure, preventing any use of the current page in a frame.
More commonly, SAMEORIGIN is used, as it does enable the use of frames, but limits them to the current domain.

You can enable X-Frame-Options with SAMEORIGIN header parameter in the Web site Security section parameter.
Turn ON the “Restrict iFrames” option