title: Security difference between X-Frame-Options and Content-Security-Policy headers?
body: <p>These HTTP headers seem to do the same thing, albeit with the latter having a bit more flexibility.</p>
  
  <p>Is there any additional security that the Content-Security-Policy offers?</p>