Remove X-Frame-Options protection from HEADER (#529)

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
browserslist · Nov 14, 2024 · c5e8fbd · c5e8fbd
1 parent faa985f
commit c5e8fbd
Showing 1 changed file with 0 additions and 1 deletion.
diff --git a/server/handlers/main.js b/server/handlers/main.js
@@ -11,7 +11,6 @@ const HEADERS = {
     `script-src 'self'`,
   'Content-Type': 'text/html; charset=utf-8',
   'X-Content-Type-Options': 'nosniff',
-  'X-Frame-Options': 'DENY',
   'X-XSS-Protection': '1; mode=block'
 }
 const INDEX = new URL('../../client/dist/index.html', import.meta.url)