On 3/29/21, 2:14 PM, "users on behalf of Peter Schober" <users-bounces at shibboleth.net on behalf of peter.schober at univie.ac.at> wrote: > (that's a "no", I guess) I believe X-Frame-Options is the historical way to do things, the CSP header is the newer one. That syntax might work with more browsers (or not). -- Scott