Tells the browser whether the page may be rendered inside a frame/iframe, a defence against clickjacking.