The X-Frame-Options header was delivered with the ALLOWALL directive.