diff --git a/files/en-us/web/http/headers/x-frame-options/index.md b/files/en-us/web/http/headers/x-frame-options/index.md index 5e09c97a233aafd..5bad2b2907bc678 100644 --- a/files/en-us/web/http/headers/x-frame-options/index.md +++ b/files/en-us/web/http/headers/x-frame-options/index.md @@ -40,7 +40,7 @@ If you specify `DENY`, not only will the browser attempt to load the page in a f - `DENY` - : The page cannot be displayed in a frame, regardless of the site attempting to do so. -- `SAMEORIGIN` {{deprecated_inline}} +- `SAMEORIGIN` - : The page can only be displayed if all ancestor frames are same origin to the page itself. - `ALLOW-FROM origin` {{deprecated_inline}} - : This is an obsolete directive. Modern browsers that encounter response headers with this directive will ignore the header completely. The {{HTTPHeader("Content-Security-Policy")}} HTTP header has a {{HTTPHeader("Content-Security-Policy/frame-ancestors", "frame-ancestors")}} directive which you should use instead.