Allow multiple values in X-Frame-Options, since the header can be repeated.
Allow multiple values in X-Frame-Options, since the header can be repeated.

firebitsbr/http-security,trailofbits/http-security