Hacker News Reader

Isn't X-Frame-Options deprecated? Pretty sure we're supposed to use Content-Security-Policy instead?

Yes but there are still browsers that support only XFO so it's mostly for them.