1 files changed, 4 insertions, 0 deletions
diff --git a/config/application.rb b/config/application.rb
index d6a3aab15..92aecc8fc 100644
--- a/config/application.rb
+++ b/config/application.rb
@@ -36,5 +36,9 @@ module Mastodon
     config.to_prepare do
       Doorkeeper::AuthorizationsController.layout 'auth'
     end
+
+    config.action_dispatch.default_headers = {
+      'X-Frame-Options' => 'DENY'
+    }
   end
 end