cms-framework

Describe the bug
Using xframe ALLOW-FROM throws error in console: Invalid 'X-Frame-Options' header encountered when loading 'https://api.dev.mysite.com/uploads/my-file.pdf': 'ALLOW-FROM dev.mysite.com' is not a recognized directive. The header will be ignored.

https://strapi.io/documentation/v3.x/concepts/middlewares.html#response-middlewares
instructions for xframe indicate `ALLOW-FR

With apos-workflow enabled, the page reorganize modal's Trash rows (when you expand pages with children) isn't aligned to be clear about the relationship. If the Trash row is part of the "Service" page context (in the screenshot), it probably should be aligned with that page's children, possibly shaded red as the "true" trash at the bottom.

![Screen_Shot_2019-09-26_at_3_36_26_PM](https://user-i

Document content types and syndication

Want to back this issue? Post a bounty on it! We

It's high time we introduced a test suite alongside the development process to help catch regressions. As we move towards a more class-based ecosystem with less reliance on global variables, this should become achievable with something like PHPUnit.

This will be an ongoing issue, so no milestone required. It can be closed when a framework is in place and the tests start being added. At minimum we

Currently the module field on package.json points to src/simpla.js but really it should point to a separate build, that's been transpiled, but not bundled. This means that whatever module bundling system consumers are using will still be used, but it won't need to be transpiled. As it currently stands, users can come up against [this bug](https://github.com/facebookincubator/create-react-app