After I upgraded my project to this theme the iFrames no longer work, they are denied by the browser due to the X-Frame-Options.
They were working before and I have not changed my response headers.
When I try to change my response header to mitigate this issue as suggested on SO,
I end up with two x-frame-options and still not workingresponse.addHeader("X-Frame-Options", "SAMEORIGIN");
Where does this X-Frame-Options come from in the California theme?X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block