Optionaloptions: { corsOrigin?: string; deleteHeaders?: string[] }Handler options
OptionalcorsOrigin?: stringCORS origin (default: "*")
OptionaldeleteHeaders?: string[]Headers to delete (default: ["X-Frame-Options", "Content-Security-Policy", "X-Xss-Protection"])
Headers handler for iframe embedding
Build a header handler that removes restrictive headers for iframe embedding
Removes X-Frame-Options, Content-Security-Policy, and X-Xss-Protection headers while adding permissive CORS and frame-ancestors headers.