same here. Would be great to get a fix for this.
$this->response->addHeader('X-Frame-Options', 'SAMEORIGIN');
This is recommended here: http://doc.silverstripe.com/framework/en/topics/security
but if you put it in the page controller init the error is:
Call to a member function addHeader() on a non-object
Posted to: addHeader memberprofiles | Show Thread | Post Reply