diff --git a/threadchat/settings.py b/threadchat/settings.py
index 8ce6033..ccd4860 100644
--- a/threadchat/settings.py
+++ b/threadchat/settings.py
@@ -126,6 +126,9 @@ STATIC_URL = "static/"
 # Default primary key field type
 # https://docs.djangoproject.com/en/4.0/ref/settings/#default-auto-field
 
+# X-Frame-Options header from XFrameOptionsMiddleware
+X_FRAME_OPTIONS = "SAMEORIGIN"
+
 DEFAULT_AUTO_FIELD = "django.db.models.BigAutoField"
 
 # Media root - where media files are stored on the disk