Status – Tested
Salesforce Update Description
Clickjack protection for legacy browsers was a critical update in Winter ’17 and was enforced for all orgs on February 10, 2017. This critical update extends legacy browser-compatible clickjack protection for Visualforce pages that set showHeader=”false” and are configured to use API versions 26.0 or earlier.