diff --git a/cms/envs/common.py b/cms/envs/common.py
index 23b7de10a5db..80338d28f38c 100644
--- a/cms/envs/common.py
+++ b/cms/envs/common.py
@@ -193,6 +193,9 @@
 
     # for expiring inactive sessions
     'session_inactivity_timeout.middleware.SessionInactivityTimeout',
+
+    # use Django built in clickjacking protection
+    'django.middleware.clickjacking.XFrameOptionsMiddleware',
 )
 
 ############# XBlock Configuration ##########
diff --git a/lms/envs/common.py b/lms/envs/common.py
index d8d571cf9b27..683bd9c4240e 100644
--- a/lms/envs/common.py
+++ b/lms/envs/common.py
@@ -724,6 +724,9 @@
 
     # for expiring inactive sessions
     'session_inactivity_timeout.middleware.SessionInactivityTimeout',
+
+    # use Django built in clickjacking protection
+    'django.middleware.clickjacking.XFrameOptionsMiddleware',
 )
 
 ############################### Pipeline #######################################