diff --git a/go_cloud/internal/http/wopi_handlers.go b/go_cloud/internal/http/wopi_handlers.go
index ae5cf83..57c9883 100644
--- a/go_cloud/internal/http/wopi_handlers.go
+++ b/go_cloud/internal/http/wopi_handlers.go
@@ -689,7 +689,7 @@ func collaboraProxyHandler(w http.ResponseWriter, r *http.Request, db *database.
 </html>`, collaboraURL, wopiSrc)
 
 	w.Header().Set("Content-Type", "text/html; charset=utf-8")
-	w.Header().Set("X-Frame-Options", "SAMEORIGIN")
+	// Don't set X-Frame-Options - this endpoint is meant to be loaded in an iframe
 	w.WriteHeader(http.StatusOK)
 	w.Write([]byte(htmlContent))