X-Frame-Options Header does not work anymore

Viewing 1 replies (of 1 total)
  • Plugin Author Dimitar Ivanov

    (@zinoui)

    Hi @misaka1

    I’ve test it, and I notice that X-Frame-Options header works as expected.

    Are you sure you don’t have a reverse proxy in front of your web server? If so, it may overwrite the header.

    Or some other plugin that unset that header?

    Or maybe you’re using HTTP Headers plugin in PHP mode in conjunction with some caching plugin?

    Don’t know what’s the exact reason that cause the issue, it’s just some gueses.

    However, instead of X-Frame-Options you may try to set the Content-Security-Policy header, the frame-ancestors directive.

Viewing 1 replies (of 1 total)
  • The topic ‘X-Frame-Options Header does not work anymore’ is closed to new replies.