diff --git a/view/Response.class.php b/view/Response.class.php index db837e79..e2b586c1 100644 --- a/view/Response.class.php +++ b/view/Response.class.php @@ -249,8 +249,8 @@ class Response public static function setDefaultSecurityHeaders() { $defaultHeaders = [ - 'Content-Security-Policy' => "frame-ancestors 'none'", - 'X-Frame-Options' => 'DENY', + //'Content-Security-Policy' => "frame-ancestors 'none'", + //'X-Frame-Options' => 'DENY', 'X-XSS-Protection' => '1', ];