less strict iframe options (#814)

ianhi · web-flow · commit c790ddb09ce3 · 2025-10-29T11:38:27.000-04:00
diff --git a/netlify.toml b/netlify.toml
@@ -31,8 +31,6 @@
 [[headers]]
   for = "/*"
   [headers.values]
-    X-Frame-Options = "DENY"
-    X-XSS-Protection = "1; mode=block"
     X-Content-Type-Options = "nosniff"
     Referrer-Policy = "strict-origin-when-cross-origin"
 
