SDPII-140 Disable IFrame, xss protection using secure header gem