# -*- mode: apache; coding: utf-8 -*-

<IfModule mod_setenvif.c>
	# Use SetEnvIf instead of SetEnv to ensure it is set during early
	# request processing
        SetEnvIf Request_Method . CSP_FRAME-ANCESTORS='self'
</IfModule>
<IfModule mod_headers.c>
        Header always set X-Frame-Options SAMEORIGIN
</IfModule>
