Bug 944824 - Remove X-Frame-Options header
0.1.11
Bug 945460 - Enable Content Security Policy