Doubt about X-Frame-Options

2

Yesterday I had a problem with X-Frame-Options , as can be seen in this post . However, I added the solution, and it worked perfectly. I added the solution, but I have no idea what it does, and I would like an explanation.

The solution added in my Global.asax was:

protected void Application_PreSendRequestHeaders()
{
    Response.Headers.Remove("X-Frame-Options");
     Response.AddHeader("X-Frame-Options", "AllowAll");

}

My question now is:

What is X-Frame-Options ?

How do you use it, and why does it show the type of problem?

    
asked by anonymous 27.03.2015 / 13:28

1 answer

1

X-Frame-Options is to indicate to the browser if and when your site may appear within <iframe> of another site. The documentation is here .

A priori, the configuration is done on the server.

You can even put specific behavior for X-Frame-Options (as in the case of your application), which is ok, since disabling this heading item can cause your site to appear inside others unwanted.

    
27.03.2015 / 15:08