DoubleClick jacking: Why Your Clickjacking Headers Never See It Coming

The attack never puts your page in a frame, so the headers on NGINX, Cloudflare and CloudFront have...