category minorAnalysis the cs/web/missing-x-frame-options query now correctly handles configuration nested in root <location> elements.