base64 decode is not proper for some of the input values
Regarding Enabling X-Frame-Options SAMEORIGIN in http response header not working