X-Frame-Options

ju.em.borges · Mar 22, 2015

Hi Friends,
How can I disable X-Frame-Options SAMEORIGIN for my domain?
I want to allow access to a specific domain.
Thank you!

soulshepard · Feb 9, 2017

did you find a solution? i am looking for the same.
you can set it in the default httpd config. but this is adding and we need to replace

soulshepard · Feb 9, 2017

for all who is also looking for it

source: https://forum.directadmin.com/archive/index.php/t-53501.html

solution:

Code:

|*if DOMAIN="customer.mccs.nl"|
Header set X-Frame-Options "ALLOW-FROM https://domain.com"
|*endif|

the solutions and difference was in the set command not add.

soulshepard · Jul 31, 2022

the the one that searches for this one, it seems allow-from is obsolete.
use this in stead:

Code:

|*if DOMAIN="remote.domain.nl"|
Header set Content-Security-Policy "frame-ancestors https://thelocalwebsitethatneedstheiframe.nl"
|*endif|