Strip X-Frame-Options header in iframe-compatible middleware

FixKlusterServices
Shipped
April 17, 2026 at 7:04 PM UTC
Author
Kamo
Commit
b83478f

Set X-Frame-Options to empty string to remove the SAMEORIGIN value that was being inherited, allowing CSP frame-ancestors to control iframe embedding instead.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing