headless-cms

Describe the bug
Using xframe ALLOW-FROM throws error in console: Invalid 'X-Frame-Options' header encountered when loading 'https://api.dev.mysite.com/uploads/my-file.pdf': 'ALLOW-FROM dev.mysite.com' is not a recognized directive. The header will be ignored.

https://strapi.io/documentation/v3.x/concepts/middlewares.html#response-middlewares
instructions for xframe indicate `ALLOW-FR

Issue Summary

I have Ghost Self-hosted.

When I try to import my subscribers from Substack, it shows this error as shown in the image.

I tried searching everywhere but no solution. I also tried to manually create the Members folder on the server but still no luck.
![CleanShot 2021-08-07 at 20 42 50@2x](https://user-images.githubusercontent.com/5517129/128604907-9d7cab8d-0d6b-4cbb

• Editor button text should be Edit
• Edit and Preview buttons should stay highlighted (Primary color) based on current mode
• Need to add an interface option for Font type (same as other interfaces) for Sans, Serif, Mono. Should we have two? One for editor and one for preview? I think both should default to sans (like this GitHub editor).
• All WYSIWYG CSS should get copied from the

Improve the tier prices feature - add info like "Buy 2 in x.xx$ and save x%"

Please add arm64 release bin

Is your feature request related to a problem? Please describe.
Allow social login:

1. Google
2. Facebook
3. Github (this is also for future in CMS discussion, create a ticket to Github purpose)
4. Others (eg, Github, MS, Twitter, Apple,...)

Describe the solution you'd like

• Allow login via /security/login or /security/register
• Allow login methods via API
• Allow l