set X-Frame-Options: SAMEORIGIN at dev-pfizer-dtd-preview.pixelpark.net

diff --git a/customer/pfizer/dev-web01-pfizer-de.pixelpark.net.yaml b/customer/pfizer/dev-web01-pfizer-de.pixelpark.net.yaml
index 95f5f99526a8552f1086c16d4ced1957984f4aed..641eff88c6c344399f411a51c6468ecb88a1291f 100644 (file)
--- a/customer/pfizer/dev-web01-pfizer-de.pixelpark.net.yaml
+++ b/customer/pfizer/dev-web01-pfizer-de.pixelpark.net.yaml
@@ -926,7 +926,7 @@ site::profile::apache::pp_vhosts:
       - 'always unset "X-Powered-By"'
       - 'set X-Content-Type-Options: nosniff'
       - 'set X-XSS-Protection: "1; mode=block"'
-      - 'set X-Frame-Options: DENY'
+      - 'set X-Frame-Options: SAMEORIGIN'
     directories:
       - directory_root:
         provider: directory