Introduce X-Frame-Origin header

Change-Id: Ia9b66297c68f819b26158c79fb2da6572c784898
diff --git a/Changes b/Changes
index 654f992..f0b921a 100755
--- a/Changes
+++ b/Changes
@@ -1,4 +1,4 @@
-0.41 2021-01-27
+0.41 2021-01-28
         - Introduce CORS headers to the proxy.
         - Introduce Content Security Policy.
         - Remove default api endpoint from config to
@@ -12,6 +12,7 @@
         - Introduce HSTS header for https_only conf.
         - Send 'nosniff' header.
         - defer main script.
+        - Introduce X-Frame-Options header.
 
 0.40 2020-12-17
         - Modernize ES and fix in-loops.