diff --git a/source b/source index 13ac7862d0c..ce19d03ccfb 100644 --- a/source +++ b/source @@ -106414,10 +106414,10 @@ new PaymentRequest(…); // Allowed to use

The `X-Frame-Options` header

-

The `X-Frame-Options` HTTP response header is a legacy way +

The `X-Frame-Options` HTTP response header is a way of controlling whether and how a Document may be loaded inside of a child - navigable. It is obsoleted by the frame-ancestors CSP directive, which provides more granular control over the + navigable. For sites using CSP, the frame-ancestors directive provides more granular control over the same situations. It was originally defined in HTTP Header Field X-Frame-Options, but the definition and processing model here supersedes that document. CSP RFC7034