diff --git a/.gitignore b/.gitignore
index 7aab100..fb0460a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,5 @@
 target/
 
 **/*.rs.bk
+
+*.sqlite
diff --git a/srv/src/main.rs b/srv/src/main.rs
index 6246bd8..e4c4ccf 100644
--- a/srv/src/main.rs
+++ b/srv/src/main.rs
@@ -7,6 +7,7 @@ use inkopslista_lib::{Item, ItemData};
 use rocket::{
     fs::{FileServer, NamedFile},
     serde::json::Json,
+    shield::Shield,
     State,
 };
 use sqlite::ConnectionThreadSafe;
@@ -77,6 +78,11 @@ fn rocket() -> _ {
     db.execute(include_str!("db/init.sql"))
         .expect("unable to initialize database");
     rocket::build()
+        .attach(
+            Shield::default()
+                // Allow content to be served through iframes
+                .disable::<rocket::shield::Frame>(),
+        )
         .manage(db)
         .mount("/", routes![index, get_list, put_list, delete_item])
         .mount("/", FileServer::from(www_path()))