X-Frames-Options: cannot set to ALLOW

Description

Because we set DENY by default and then override that at the page level, ALLOW is never set because we were not setting a header at all to indicate ALLOW.

Environment

None

Assignee

Dominic Watson

Reporter

Dominic Watson

Labels

None

Accepted

Yes

Fix versions

Affects versions

Priority

High
Configure