Embedded comments not displayed due to X-Frame-Options DENY

[guiniol]

@guiniol

So… it seems it was nginx adding the DENY at the end. Not sure why exactly, but I think it may have to do with proxy_set_header X-Forwarded-Proto $scheme;. When I added add_header X-Frame-Options “ALLOWALL”, I ended up with two ALLOWALL so I set it to add_header X-Frame-Options “” and now I only have one (like I should).

Well, it was me all along. When I added ssl, I also added a few lines for security, one of which was the X-Frame-Options DENY. Mistery solved on that front.