diff --git a/cmd/generic-handlers.go b/cmd/generic-handlers.go index c61b20567..fae367b24 100644 --- a/cmd/generic-handlers.go +++ b/cmd/generic-handlers.go @@ -560,7 +560,6 @@ func addSecurityHeaders(h http.Handler) http.Handler { header := w.Header() header.Set("X-XSS-Protection", "1; mode=block") // Prevents against XSS attacks header.Set("Content-Security-Policy", "block-all-mixed-content") // prevent mixed (HTTP / HTTPS content) - header.Set("X-Frame-Options", "deny") // Prevent against Clickjack attack header.Set("X-Content-Type-Options", "nosniff") // Prevent mime-sniff header.Set("Strict-Transport-Security", "max-age=31536000; includeSubDomains") // HSTS mitigates variants of MITM attacks h.ServeHTTP(w, r)