4

Hi I added new HTTP response header in default website level as'X-Frame-Options:ALLOW'. IIS is adding default 'X-Frame-Options:SAMEORIGIN' and sending both the header in response. And then browser is giving error as Multiple 'X-Frame-Options' headers with conflicting values ('SAMEORIGIN, ALLOW-FROM http://srv-ind-svt26dw.vanenburg.com:8080/') encountered when loading 'http://srv-ind-svt26dw.vanenburg.com/OTCS/livelink.exe?func=brava.bravaviewer&nodeid=18941'. Falling back to 'DENY'. Can any one help me out from this issue.

Many thanks

Nagama Inamdar
  • 2,851
  • 22
  • 39
  • 48
user1150361
  • 41
  • 1
  • 4

1 Answers1

1

If your using ASP.NET MVC 5, it insert SAMERORIGIN by default see this.

Community
  • 1
  • 1
David Yates
  • 1,935
  • 2
  • 22
  • 38