Update article.md

Author: iliakan

4-frames-and-windows/06-clickjacking/article.md

@@ -137,7 +137,10 @@ The header may have 3 values:
 `ALLOW-FROM domain`
 : Allow inside a frame if the parent document is from the given domain.
 
-For instance, Twitter uses `X-Frame-Options: SAMEORIGIN`. Here's the result:
+For instance, Twitter uses `X-Frame-Options: SAMEORIGIN`.
+
+````online
+Here's the result:
 
 ```html
 <iframe src="https://twitter.com"></iframe>
@@ -146,6 +149,7 @@ For instance, Twitter uses `X-Frame-Options: SAMEORIGIN`. Here's the result:
 <iframe src="https://twitter.com"></iframe>
 
 Depending on your browser, the `iframe` above is either empty or alerting you that the browser won't permit that page to be navigating in this way.
+````
 
 ## Showing with disabled functionality