apache - How to use the SetEnvIf in this situation? -


i try put x-frame-options http header prevent clickjacking attack. if set header in httpd.conf or .htaccess file this, works.

header set x-frame-options sameorigin 

but there several places using iframe on own website, if this, block iframe on own website. try add exception own website. check if request own website, allow iframe on page. tried this, didn't work.

setenvif host http://myownwebsite\.com iframes_are_cool header set x-frame-options sameorigin env=!iframes_are_cool 

could me this?


Comments

Popular posts from this blog

asp.net - repeatedly call AddImageUrl(url) to assemble pdf document -

java - Android recognize cell phone with keyboard or not? -

iphone - How would you achieve a LED Scrolling effect? -