disable iframe blocking headers

This commit is contained in:
Jeremy Kauffman 2019-12-07 11:50:08 -05:00
parent 6e928b28e0
commit e791b51de7

View file

@ -249,8 +249,8 @@ class Response
public static function setDefaultSecurityHeaders()
{
$defaultHeaders = [
'Content-Security-Policy' => "frame-ancestors 'none'",
'X-Frame-Options' => 'DENY',
//'Content-Security-Policy' => "frame-ancestors 'none'",
//'X-Frame-Options' => 'DENY',
'X-XSS-Protection' => '1',
];