Set X-Frame-Options header to deny

containers/webserver/httpd.conf

@@ -424,6 +424,7 @@ LogLevel warn
     # 'Proxy' request header is undefined by the IETF, not listed by IANA
     #
     RequestHeader unset Proxy early
+    Header set X-Frame-Options "deny"
 </IfModule>
 
 <IfModule mime_module>