Github user alopresto commented on the issue:
https://github.com/apache/nifi/pull/2812
I verified this by starting the application and using browser developer
tools to monitor the requests when loading the docs. All resource types (HTML,
CSS, etc.) had the *X-Frame-Options* header set correctly.
Ran `contrib-check` and all tests pass. +1, merging. ---
