code for clickjacking test