apache - How to use the SetEnvIf in this situation? -
i try put x-frame-options http header prevent clickjacking attack. if set header in httpd.conf or .htaccess file this, works.
header set x-frame-options sameorigin
but there several places using iframe on own website, if this, block iframe on own website. try add exception own website. check if request own website, allow iframe on page. tried this, didn't work.
setenvif host http://myownwebsite\.com iframes_are_cool header set x-frame-options sameorigin env=!iframes_are_cool
could me this?
Comments
Post a Comment