* Sends X-Frame-Options header * configured via hbase.http.filter.xframeoptions.mode * defaults to DENY Signed-off-by: Sean Busbey <busbey@cloudera.com>