Avoid CSRF setting adding x-frame-options header (#983)

Author: claudiamurialdo

dotnet/src/dotnetcore/GxNetCoreStartup/Startup.cs

@@ -221,7 +221,7 @@ public void ConfigureServices(IServiceCollection services)
 				services.AddAntiforgery(options =>
 				{
 					options.HeaderName = HttpHeader.X_CSRF_TOKEN_HEADER;
-					options.SuppressXFrameOptionsHeader = false;
+					options.SuppressXFrameOptionsHeader = true;
 				});
 			}
 			services.AddDirectoryBrowser();