X-Frame-Options: nosniff. Fix #427

Depends #429