discourse/discourse — pull request #1585 by raul (2013-10-28 22:18:28+00:00)
Title: Require `X-Frame-Options: SAMEORIGIN` for clickjack prevention

Standard [clickjacking](http://en.wikipedia.org/wiki/Clickjacking) prevention, props to @tmaher.