[fix] SAMEORIGIN

9 years ago · c97a76eae5
1 changed files with 0 additions and 1 deletions
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@ -76,7 +76,6 @@ location ^~ #LOCATION# {
    # Add headers to serve security related headers
    add_header Strict-Transport-Security "max-age=15768000;";
    add_header X-Content-Type-Options nosniff;
-    add_header X-Frame-Options "SAMEORIGIN";
    add_header X-XSS-Protection "1; mode=block";
    add_header X-Robots-Tag none;
    add_header X-Download-Options noopen;