diff --git a/source b/source index 13ac7862d0c..ce19d03ccfb 100644 --- a/source +++ b/source @@ -106414,10 +106414,10 @@ new PaymentRequest(…); // Allowed to use
X-Frame-Options
` headerThe `X-Frame-Options
` HTTP response header is a legacy way
+
The `X-Frame-Options
` HTTP response header is a way
of controlling whether and how a Document
may be loaded inside of a child
- navigable. It is obsoleted by the frame-ancestors
CSP directive, which provides more granular control over the
+ navigable. For sites using CSP, the frame-ancestors
directive provides more granular control over the
same situations. It was originally defined in HTTP Header Field X-Frame-Options, but
the definition and processing model here supersedes that document.
CSP RFC7034