title: Spring Boot Actuator adding X-Frame-Options = DENY to all endpoints (particularly error endpoint)
body: <p>I am attempting to set the X-Frame-Options to DENY for all management endpoints, particularly the <code>/error</code> endpoint. I have the following in my application.properties of my Spring Boot application.</p>
  
  <pre><code>security.headers.frame=true
  management.security.enabled=true
  management.port=8001
  </code></pre>
  
  <p>When I go to <code>http://localhost:8001/error</code> I do not have the X-Frame-Options header, however the <code>http://localhost:8001/trace</code> endpoint does have the header. How do I configure my application.properties or what do I need to override to get that response header for the error endpoint?</p>