I am using this code. In the header section of the page, this CSS rule:
html{display:none;}
And then this javascript:
if (self == top)
document.documentElement.style.display = 'block';
else
top.location = self.location;
Can I consider it safe against clickjacking from mobile devices?
If not, do I have to add other protections like the X-Frame-Options
header, or others?