HTTP "X-Frame-Options" n'est pas configurée pour être égale à "SAMEORIGIN"

ℹ️ Support
1

Hello,

After updated my nextcloud to V12, I have this error "HTTP X-Frame-Options is not configured to be equal to SAMEORIGIN"
But in my .htaccess, I have <IfModule mod_env.c> # Add security and privacy related headers Header set X-Content-Type-Options "nosniff" Header set X-XSS-Protection "1; mode=block" Header set X-Robots-Tag "none" Header set X-Download-Options "noopen" Header set X-Permitted-Cross-Domain-Policies "none" Header append X-Frame-Options SAMEORIGIN SetEnv modHeadersAvailable true </IfModule>
May you help me?

Nextcloud version : 12
Operating system and version : Ubuntu 16.04
Apache or nginx version : Apache/2.4.18 (Ubuntu)
PHP version : PHP 7.0.18-0ubuntu0.16.04.1 (cli)

2

Is mod_env enabled? Are the other headers set correctly?

3

This page https://doc.owncloud.org/server/9.1/admin_manual/configuration_server/harden_server.html#enable-hsts-label say :
These headers are hard-coded into the ownCloud server, and need no intervention by the server administrator.