Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

X-Frame-Options #2

Closed
JosefJezek opened this issue Aug 7, 2014 · 2 comments
Closed

X-Frame-Options #2

JosefJezek opened this issue Aug 7, 2014 · 2 comments

Comments

@JosefJezek
Copy link

Could you add option to child for disable X-Frame-Options ALLOWALL?
https://github.com/mainwp/mainwp-child/blob/master/mainwp-child.php#L10

I need set own X-Frame-Options on server.

In future add CSP1.1 frame-ancestors.

@steveni1963
Copy link

I have raised a query with support over the same issue. All my child wordpress sites now are running with dual X-Frame-Options as was already set on the server. Found because chrome wouldn't load popup in backend editor and debug showed the error due to ALLOWALL and SAMEORIGIN being set in the header.

@bogdan-mainwp
Copy link
Contributor

This issue has been fixed in one of our previous versions.

bogdan-mainwp pushed a commit that referenced this issue Aug 25, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants