From c96d168b6d35690bc82d48f960a01b9c5204cfa4 Mon Sep 17 00:00:00 2001
From: Basil Bruhn <basil.bruhn@psi.ch>
Date: Tue, 11 Nov 2025 11:28:42 +0100
Subject: [PATCH] x-frame-options allow

Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
---
 nginx.conf | 1 -
 1 file changed, 1 deletion(-)

diff --git a/nginx.conf b/nginx.conf
index 022ad56..6516663 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -12,7 +12,6 @@ http {
     default_type  application/octet-stream;
 
     add_header X-Content-Type-Options nosniff;
-    add_header X-Frame-Options DENY;
     add_header X-XSS-Protection "1; mode=block";
     add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; # HSTS
     add_header Referrer-Policy no-referrer-when-downgrade;  # Referrer policy