Originally Posted by IBobi

For those getting mobile hijacks and using Chrome:




Load chrome://flags/#enable-framebusting-needs-sameorigin-or-usergesture in the browser's address bar.

Switch the status of the "Framebusting requires same-origin or a user gesture" experimental flag from default to enabled.

Restart the Chrome browser.