'Check x-frame-options header'

def grep(self, request, response):

    if (not response.is_text_or_html()):
        return
    self._total_count += 1
    headers = response.get_headers()
    (x_frame_options, header_name) = headers.iget('x-frame-options', '')
    if (not (x_frame_options.lower() in ('deny', 'sameorigin'))):
        self._vuln_count += 1
        if (response.get_url() not in self._vulns):
            self._vulns.append(response.get_url())
            self._ids.append(response.id)
