Clickjacking is an attack in which your website is displayed invisibly in a frame (iframe) of another page and the visitor clicks on it without knowing. It is prevented by the X-Frame-Options header (values DENY or SAMEORIGIN), or by the frame-ancestors rule in CSP.
FAQ / Glossary