spring-projects/spring-security — pull request #72 by getvictor (2014-02-09 16:35:04+00:00)
Title: Remove double ALLOW-FROM from X-Frame-Options header.

The interface documentation for getAllowFromValue states: Gets the value for ALLOW-FROM excluding the ALLOW-FROM.