diff --git a/ietf/settings.py b/ietf/settings.py
index 60170e0ec92..f138ed59e8e 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -326,7 +326,7 @@ def skip_unreadable_post(record):
 # ------------------------------------------------------------------------
 
 
-X_FRAME_OPTIONS = 'ALLOW-FROM ietf.org *.ietf.org meetecho.com *.meetecho.com gather.town *.gather.town'
+X_FRAME_OPTIONS = 'SAMEORIGIN'
 CSRF_TRUSTED_ORIGINS = ['ietf.org', '*.ietf.org', 'meetecho.com', '*.meetecho.com', 'gather.town', '*.gather.town', ]
 CSRF_COOKIE_SAMESITE = 'None'
 CSRF_COOKIE_SECURE = True