added protection settings for xframe origin