SEC-2511: Remove double ALLOW-FROM from X-Frame-Options header.

The interface documentation for getAllowFromValue states: Gets the value for ALLOW-FROM excluding the ALLOW-FROM.
SEC-2511: Remove double ALLOW-FROM in X-Frame-Options header