ClickJacking finding on Openfire 4.1.5