X-Origin

 X-Origin  is an incorrect way to reference X-Frame-Options headers to prevent clickjacking, see https://tools.ietf.org/html/rfc7034 for details.