// semmle-extractor-options: ${testdir}/../../../../../resources/stubs/System.Web.cs /r:System.Collections.Specialized.dll using System; using System.Web; public class AddXFrameOptions : IHttpHandler { public void ProcessRequest(HttpContext ctx) { // GOOD: X-Frame-Options added ctx.Response.AddHeader("X-Frame-Options", "DENY"); } public bool IsReusable { get { return true; } } }