From bff6c8aafc49a3260294c3244571e3a31fd09cca Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Sun, 26 Mar 2017 17:24:50 +0200 Subject: Move X-Frame-Options into PHP The public calendar view should be embeddable and we can't do that if the .htaccess sets a global X-Frame-Options. Signed-off-by: Lukas Reschke --- .htaccess | 1 - 1 file changed, 1 deletion(-) (limited to '.htaccess') diff --git a/.htaccess b/.htaccess index 525ee3a0fb6..7bf8759e383 100644 --- a/.htaccess +++ b/.htaccess @@ -14,7 +14,6 @@ Header set X-Content-Type-Options "nosniff" Header set X-XSS-Protection "1; mode=block" Header set X-Robots-Tag "none" - Header set X-Frame-Options "SAMEORIGIN" Header set X-Download-Options "noopen" Header set X-Permitted-Cross-Domain-Policies "none" SetEnv modHeadersAvailable true -- cgit v1.2.3