Add option for X-Frame Options #9

Author: helalferrari

defaults/main.yml

@@ -29,4 +29,5 @@ nginx_drupal_upstream_backup_servers: ["unix:/var/run/php-fpm-bkp.sock"]
 nginx_drupal_sites: none
 nginx_drupal_http_pre_includes: []
 nginx_drupal_http_post_includes: []
-nginx_drupal_language_path_prefixes: []
+nginx_drupal_language_path_prefixes: []
+nginx_drupal_xframe_options: "SAMEORIGIN"

templates/nginx.j2

@@ -169,7 +169,7 @@ http {
     #add_header X-Frame-Options SAMEORIGIN;
     ## For sites accepting to be framed in any context comment the
     ## line below.
-    add_header X-Frame-Options DENY;
+    add_header X-Frame-Options {{nginx_drupal_xframe_options}};
 
     ## Block MIME type sniffing on IE.
     add_header X-Content-Options nosniff;