Holtzman
Holtzman copied to clipboard
set x-frame-options header
to prevent click jacking
https://developer.mozilla.org/en-US/docs/Web/HTTP/X-Frame-Options
via https://github.com/NewSpring/newspring-app/issues/211