title: Invalid 'X-Frame-Options' Header. ' ' is not a recognized directive
body: <p>I'm using the Zuora hosted payment iframe. In short, you load the Zuora library to give you access to a <code>Z</code> object containing the Zuora API methods. Using <code>Z.render()</code> to render the payment form into an iframe. </p>
  
  <p>When the iframe loads this error is shown in the console:</p>
  
  <pre><code>Invalid 'X-Frame-Options' Header when loading '[URL-HERE]': ' ' is not a recognized directive. The header will be ignored.
  </code></pre>
  
  <p>Based on the <a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options" rel="noreferrer">MDN docs for X-Frame Options</a> the available directives are <code>DENY</code>, <code>SAMEORIGIN</code>, or <code>ALLOWFROM [URL]</code>.</p>
  
  <p>Is this directive supposed to be set on our server making the request? Or is this an issue on the e-commerce's API? </p>