Lack of X-Frame-Options without a well-defined risk

The content of this page has moved to our new site: https://bughunters.google.com/learn/invalid-reports/web-platform/csrf-clickjacking/4895052285083648