Describe the bug
Using xframe ALLOW-FROM throws error in console: Invalid 'X-Frame-Options' header encountered when loading 'https://api.dev.mysite.com/uploads/my-file.pdf': 'ALLOW-FROM dev.mysite.com' is not a recognized directive. The header will be ignored.

https://strapi.io/documentation/v3.x/concepts/middlewares.html#response-middlewares
instructions for xframe indicate `ALLOW-FR

Is your feature request related to a problem? Please describe.

I try to execute my first GET request and get this result:

I think the first-time-user experience could get improved here.

The hint to F12 vanishes soon, and I think accessing the error message via F12 is not a

Steps to reproduce:

1. Visit the Actions tab.
2. Create an action with some comment
3. Try modifying the action comment

This would be SUPER helpful, if anyone wants to set this up using netlify functions and github oauth

Our NETLIFY_TOKEN secret is already present.

monaco webpack example and graphiql webpack examples should both have a github oauth login

https://leapgraph.com/graphql-api-security

This article mentions several add-on packages that Reaction may want to use. This issue is simply to investigate whether these vulnerabilities are present and try adding the packages to solve them.

Getting an error here when using the remove_promotion_line_items method. Seems like it should be using variant rather than item
https://github.com/spree/spree/blob/8ca9ec736a471b66f66d718b157be69946f8c5fc/core/app/models/spree/promotion_handler/coupon.rb#L78

When I try to remove a repeater item on mobile pressing the "X" on the right, instead of removing it, it tries to drag (to reorder) it, no matter what I try.

Directus v9.0.0-rc69
Chrome for Android v91.0

We should use https://github.com/jonschlinkert/parse-github-url to intelli

Just gave VulcanJS a try after using Meteor for a while. I'm getting the following error:

`
Warning: React.createFactory() is deprecated and will be removed in a future major release. Consider using JSX or use React.createElement() directly instead.
meteor://💻app/packages/vulcan_lib.js:422
if (error) throw error; // eslint-disable-next-line no-console
^

[Error:

https://github.com/redwoodjs/redwood/blob/3557f707889998ccdc1c3542048618b2ef8ba6ac/packages/auth/src/authClients/firebase.ts#L56

You would:

1. Have a place to store the token's payload ( with expiration time )
2. Compare the current time against the expiration time whenever getToken is called
3. If it has not expired, return the old token, if it has expired, call the part the retrieves the t