A header that determines whether other websites may embed your files (images, scripts). The values same-origin and same-site prevent a foreign website from using your resources, which protects against certain browser-level attacks.
FAQ / Glossary