Don't send X-Frame-Options: DENY as this was obsoleted by our updated…

… CSP headers
pascalchevrel · Feb 1, 2024 · bcc331f · bcc331f
1 parent 871333d
commit bcc331f
Showing 1 changed file with 0 additions and 1 deletion.
diff --git a/app/inc/init.php b/app/inc/init.php
@@ -26,7 +26,6 @@
 
 // Send HTTP security headers
 header('X-Content-Type-Options: nosniff');
-header('X-Frame-Options: DENY');
 
 // Allow http ressources when ran locally
 if (! LOCALHOST) {