Best Way To Set x-frame-options?

[theRKF]

I'm wondering about the best way to implement the x-frame-options header?

We've added "Header always append X-Frame-Options SAMEORIGIN" to the httpd.conf file, restarted, nada.

Tried adding it within a specific virtualhost, no joy.

I did look through the wiki, and the LS control panel, but haven't found any info or setting(s) that would apply.

Any suggestions?

 

[Long]

Hi,
You can add it to .htaccess file. Just test it and works.
About in httpd.conf, need to further test.

 

[Long]

Just confirmed it works too if you put it into httpd.conf.
Please check your lsws configuration, especially the Using Apache Configuration File section in Server General setting page.

 

[theRKF]

Thanks for the help.

Turns out the header diagnostic tool was faulty

Adding it to httpd.conf worked the first time... The tool just wouldn't show it. Different tool, better results.

 

[Long]

Good to know

My pleasure

 

[Sonam4715]

Yeah there will be a way, you can find the answer in a video tutorial from intellipaat