Merge pull request #1417 from abhinav-koppula/clickjacking-master

[Security][Clickjacking]-Adding X-Frame-Options and X-Frame-Options h…

Author: ThomasKranitsas

server.js

@@ -23,6 +23,8 @@ app.use((req, res, next) => {
   res.header('Strict-Transport-Security', 'max-age=31536000; includeSubDomains; preload');
   res.header('Cache-control', 'public, max-age=0');
   res.header('Pragma', 'no-cache');
+  res.setHeader('X-Frame-Options', 'DENY');
+  res.setHeader('Content-Security-Policy', "frame-ancestors 'none';");
 
   next();
 });