<meta content='frame-ancestors 'none';' http-equiv='Content-Security-Policy'/> <meta content='deny' http-equiv='X-Frame-Options'/>