<!DOCTYPE html>
<html>
	  <head>
        <meta charset="UTF-8" />
	      <title>DATA Act Broker</title>
	      <link rel="stylesheet" href="dev/css/main.css">
	  </head>
	  <body>
	      <div id="app"></div>
		  <script type="text/javascript" src="dev/app.js"></script>
		  <script type="text/javascript" src="dev/newrelic.js"></script>
    </body>
</html>

<!DOCTYPE html>
<html>
	<head>
		<meta charset="UTF-8" />
		<meta http-equiv="X-Frame-Options" content="SAMEORIGIN" />
		<title>DATA Act Broker</title>
		<link rel="stylesheet" href="dev/css/main.css">
	</head>
	<body>
		<div id="app"></div>
		<script type="text/javascript" src="dev/app.js"></script>
		<script type="text/javascript" src="dev/newrelic.js"></script>
	</body>
</html>

Allow only sameorigin for X-Frame-Origin
Security: Allow only sameorigin for X-Frame-Origin
