apply X-Frame-Options behavior to HTML Preview