question: allows a secure web page from host b to declare that its content for example a button , links , text , etc. must not be displayed in a frame or of another page e.g. from host a . in principle this is done by a policy declared in the http header and enforced by conforming browser implementations concode_field_sep Long maxAge concode_elem_sep String xssOptions concode_elem_sep Boolean includeSubDomains concode_elem_sep String location concode_elem_sep String frameOptions concode_field_sep String getLocation concode_elem_sep String getMaxAge concode_elem_sep boolean toBoolean concode_elem_sep boolean hasXSSOptions concode_elem_sep boolean isEmpty concode_elem_sep boolean hasMaxAge concode_elem_sep boolean hasLocation concode_elem_sep boolean hasFrameOptions concode_elem_sep String getXssOptions
target: String function ( ) { return frameOptions ; }