message: remove X-Frame-Options header for storage read requests
diff: import { OBJECT_PREFIX, META_PREFIX, STORAGE_RULES, PathConfig, containsSomeRule } from './utils'
  import { NextFunction, Request, Response, Router } from 'express'
  -
  import { deleteFile } from './delete'
  import { listGet } from './list_get'
  import { uploadFile } from './upload'
  @@ -28,7 +27,14 @@ const createRoutes = (
  // read, get, list
  if (containsSomeRule(rules, ['read', 'get', 'list'])) {
  - middleware.get(path, createSecureMiddleware(listGet, rules, isMetadataRequest))
  + middleware.get(
  + path,
  + (_, res, next) => {
  + res.removeHeader('X-Frame-Options')
  + next()
  + },
  + createSecureMiddleware(listGet, rules, isMetadataRequest)
  + )
  }
  // write, delete
  