KamoCRM

Strip X-Frame-Options header in iframe-compatible middleware

FixKlusterServices
Shipped
17 ஏப்ரல், 2026 அன்று 7:04 PM UTC
Author
Kamo
Commit
b83478f

Set X-Frame-Options to empty string to remove the SAMEORIGIN value that was being inherited, allowing CSP frame-ancestors to control iframe embedding instead.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing