Removed x-frame option response headers

nhsd-exeter · Sep 26, 2024 · c827ee4 · c827ee4
1 parent a7668ea
commit c827ee4
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/infrastructure/stacks/shared-resources/api-gateway-responses.tf b/infrastructure/stacks/shared-resources/api-gateway-responses.tf
@@ -7,9 +7,9 @@ resource "aws_api_gateway_method_response" "response_200" {
     "method.response.header.Cache-control"             = true
     "method.response.header.Pragma"                    = true
     "method.response.header.Strict-Transport-Security" = true
-    "method.response.header.X-Frame-Options"           = true
     "method.response.header.Content-Security-Policy"   = true
     "method.response.header.X-Content-Type-Options"    = true
+    # "method.response.header.X-Frame-Options"           = true
   }
   response_models = {
     "application/json" = aws_api_gateway_model.default_model.name
@@ -25,9 +25,9 @@ resource "aws_api_gateway_method_response" "response_400" {
     "method.response.header.Cache-control"             = true
     "method.response.header.Pragma"                    = true
     "method.response.header.Strict-Transport-Security" = true
-    "method.response.header.X-Frame-Options"           = true
     "method.response.header.Content-Security-Policy"   = true
     "method.response.header.X-Content-Type-Options"    = true
+    # "method.response.header.X-Frame-Options"           = true
   }
   response_models = {
     "application/json" = aws_api_gateway_model.default_model.name
@@ -43,9 +43,9 @@ resource "aws_api_gateway_method_response" "response_500" {
     "method.response.header.Cache-control"             = true
     "method.response.header.Pragma"                    = true
     "method.response.header.Strict-Transport-Security" = true
-    "method.response.header.X-Frame-Options"           = true
     "method.response.header.Content-Security-Policy"   = true
     "method.response.header.X-Content-Type-Options"    = true
+    # "method.response.header.X-Frame-Options"           = true
   }
   response_models = {
     "application/json" = aws_api_gateway_model.default_model.name