discourse-allow-iframe Sets the X-Frame-Options header to ALLOW-FROM *. So you can embedding Discourse in an iframe.