'X-Frame-Options' to 'SAMEORIGIN' 待解决

https://dormousehole.readthedocs.io/en/latest/security.html#security-csp

来源：oschina

链接：https://my.oschina.net/u/4350128/blog/4291461