Issue #3286042 by Project Update Bot, stevenlafl, mrinalini9: Automated Drupal...

allow_iframed_site.info.yml

 name: Allow site to be iframed
-description: Watch out for clickjacking...
+description: Allows certain paths to be embedded in iframes. Watch out for clickjacking!
 type: module
 package: Security
 configure: allow_iframed_site.settings
-core: 8.x
-core_version_requirement: ^8 || ^9
+core_version_requirement: ^8.9 || ^9.5 || ^10

src/EventSubscriber/RemoveXFrameOptionsSubscriber.php

@@ -2,9 +2,9 @@
 
 namespace Drupal\allow_iframed_site\EventSubscriber;
 
+use Symfony\Component\HttpKernel\Event\ResponseEvent;
 use Drupal\Component\Plugin\Exception\PluginException;
 use Symfony\Component\EventDispatcher\EventSubscriberInterface;
-use Symfony\Component\HttpKernel\Event\FilterResponseEvent;
 use Symfony\Component\HttpKernel\KernelEvents;
 use Drupal\Core\Config\ConfigFactoryInterface;
 use Drupal\Core\Executable\ExecutableManagerInterface;
@@ -44,11 +44,11 @@ class RemoveXFrameOptionsSubscriber implements EventSubscriberInterface {
   /**
    * Remove the X-Frame-Options header.
    *
-   * @param \Symfony\Component\HttpKernel\Event\FilterResponseEvent $event
+   * @param \Symfony\Component\HttpKernel\Event\ResponseEvent $event
    *
    * @throws \Drupal\Component\Plugin\Exception\PluginException
    */
-  public function RemoveXFrameOptions(FilterResponseEvent $event) {
+  public function RemoveXFrameOptions(ResponseEvent $event) {
     $xframe = TRUE;
     /**
      * Don't remove X-Frame-Options if pages and negate fields are not configured.