The response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking attack.. Some browsers would interpret these results incorrectly, allowing clickjacking attacks.Referenceshttps://bugzilla.redhat.com/show_bug.cgi?id=2106780
