[BUG] SWAG’s Vaultwarden subdomain.conf.sample does not remove X-Frame-Options and Content-Security-Policy for 2FA API calls

[BUG] SWAG’s Vaultwarden subdomain.conf.sample does not remove X-Frame-Options and Content-Security-Policy for 2FA API calls #1672