the website is vulnerable to clickjacking attacks!