Hi guys, Follows what Adobe responded:Could you please open this page [1] and review the property "Additional response headers"? Add the value "X-Frame-Options=SAMEORIGIN" and validate.            Let me know if you have any question.            [1] http://<host>:<port>/system/console/configMgr/org....

Thanks Scott.I will file a ticket and check the right approach.Rgds,    

Hi guys, In AEM 6.2 release notes it says AEM has capability of adding X-FRAME-OPTIONS to response headers.This is what is in docs:Added configurable X-FRAME-OPTIONS header to avoid click-jackingThe documentation doesnt state where that can be configured.Where can I configure that? On OSGI?Thanks.  ...