HttpContext.Current.Response.Headers.Add("X-Frame-Options", "DENY");
top of page
bottom of page