we put a nginx reverse proxy with
proxy_hide_header X-Frame-Options; to solve it
proxy_hide_header X-Frame-Options;