Merge "Manage disallow_iframe_embed"

diff --cc puppet/services/horizon.yaml
index e59dc20,3cdd069..d7f1075
--- 1/puppet/services/horizon.yaml
--- 2/puppet/services/horizon.yaml
+++ b/puppet/services/horizon.yaml
@@@ -58,9 -58,9 +58,10 @@@ outputs
                dport:
                  - 80
                  - 443
 +          horizon::enable_secure_proxy_ssl_header: true
            horizon::disable_password_reveal: true
            horizon::enforce_password_check: true
+           horizon::disallow_iframe_embed: true
            horizon::cache_backend: django.core.cache.backends.memcached.MemcachedCache
            horizon::django_session_engine: 'django.contrib.sessions.backends.cache'
            horizon::vhost_extra_params: