Description: Restricts which sites can embed your site in an iframe (anti-clickjacking) (Pro).
How it works: builder_frame_ancestors sets the CSP frame-ancestors directive; pairs well with X-Frame-Options.
How to access / configure:
- WP Admin → AegisShield → Security Headers → CSP Builder.
- Set frame ancestors to ‘none’ or ‘self’.
- Save changes.
Recommended setting: Use ‘none’ for most sites; ‘self’ if you embed your own pages internally.