Timeline for How to set X-Frame-Options to deny?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 10, 2018 at 12:40 | comment | added | user1069816 |
You should end up with a section like this in the web.config - <outboundRules> <rule name="X-Frame-Options" patternSyntax="Wildcard"> <match serverVariable="RESPONSE_X-Frame-Options" pattern="*" /> <action type="Rewrite" value="DENY" /> </rule> </outboundRules>
|
|
| May 10, 2018 at 12:32 | comment | added | user1069816 | Note that you need to specify variable name as RESPONSE_X-Frame-Options, not just X-Frame-Options and you don't need to add a "Server Variable" for this to work. | |
| Oct 18, 2016 at 9:08 | vote | accept | Gatogordo | ||
| Oct 17, 2016 at 11:57 | history | answered | Mark Cassidy♦ | CC BY-SA 3.0 |