Clickjack protection
Clickjacking is a malicious technique of fooling a web user into clicking on something different from what the user intended and often takes the form of embedded code or script that executes without the user's knowledge, for example, when clicking on a button or concealed link that then performs another function. There are various features that can be used to set clickjack protection as per the upcoming sections.
Enable clickjack protection for setup pages
The Enable clickjack protection for setup pages option adds security to help guard against clickjack attacks on setup Salesforce pages.
Enable clickjack protection for non-setup Salesforce pages
The Enable clickjack protection for non-setup Salesforce pages option adds security to help guard against clickjack attacks on non-setup Salesforce pages.
Enable clickjack protection for non-setup customer Visualforce pages
The Enable clickjack protection for non-setup customer Visualforce pages option protects against clickjack attacks on your custom Visualforce pages. The effect of this is that Visualforce pages in a page layout do not function when clickjack protection is on.