Path chooser does not load due to X-Frame-Options: DENY

[mschfh]

Description

The path chooser does not work as "X-Frame-Options: DENY" prevents the iframe from being loaded.

steps to reproduce:

1. Settings -> General
2. Click on "Browse" next to "Download folder"

3. The path chooser doesn't load, there is an error in the browser console

Refused to display 'http://localhost:8000/' in a frame because it set 'X-Frame-Options' to 'deny'.

Additional references

X-Frame-Options is being deprecated in favor of the frame-ancestors CSP directive, perhaps replace it with:

Content-Security-Policy: frame-ancestors 'self';

[GammaC0de]

perhaps replace it with:
Content-Security-Policy: frame-ancestors 'self';

I can see you're using MacOS which I do not have.
Have you checked that your suggestion solve the issue for you?

[mschfh]

This should affect all platforms / standard-compliant browsers.
I only tested X-Frame-Options: SAMEORIGIN, not the CSP change (which would be more of an enhancement than a bug fix).