OWASP has a page where they suggest to use x-frame-options and frame-options to prevent clickjacking. The latter is defined as a draft few yeards ago, but I cannot find the information on any implementation or acceptance of this draft. Is it accepted, is it planned to or in other words what is it's status and should we be adding it or only use x-frame-options for now.
Frame-Options is not standard.
The new standard is to use CSP's frame-ancestors directive.
The frame-ancestors directive specifies valid parents that may embed a page using the
<frame>and<iframe>elements. This directive is not supported in the element or by the Content-Security-Policy-Report-Only header field.
As this is a new standard (see browser support here), it is advised to also use X-Frame-Options is the meantime while all browsers your platform supports either catch up or fizzle out.