Set xframe_options_sameorigin policy on filebrowser views.