title: Is Frame-Options a standard or it's only a draft with no schedule to approve?
body: <p>OWASP has a <a href="https://www.owasp.org/index.php/List_of_useful_HTTP_headers" rel="nofollow noreferrer">page</a> where they suggest to use x-frame-options and frame-options to prevent clickjacking. The latter is defined as a <a href="https://datatracker.ietf.org/doc/html/draft-gondrom-frame-options-02" rel="nofollow noreferrer">draft</a> few yeards ago, but I cannot find the information on any implementation or acceptance of this draft. Is it accepted, is it planned to or in other words what is it's status and should we be adding it or only use x-frame-options for now.</p>