X-Frames-Opetions header being set for stateless requests

Description

It shouldn't be (i.e. REST API requests)

Environment

None

Assignee

Unassigned

Reporter

Dominic Watson

Labels

None

Accepted

Yes

Fix versions

Priority

Medium
Configure