package header var ( DefaultContentSecurityPolicy = "frame-ancestors 'none';" DefaultFrameOptions = "DENY" )