CSecurityFrame::SetHeader

static function SetHeader()
{
	if((!defined("BX_SECURITY_SKIP_FRAMECHECK") || BX_SECURITY_SKIP_FRAMECHECK!==true) && !CSecurityFrameMask::Check(SITE_ID, $_SERVER["REQUEST_URI"]))
	{
		header("X-Frame-Options: SAMEORIGIN");
		header("Content-Security-Policy: frame-ancestors 'self';");
	}
}