X iframe headers

Website Building
#1

Turned out that this hosting sends:
X-Content-Type-Options:nosniff
X-Frame-Options:SAMEORIGIN
X-Xss-Protection:1; mode=block
repose headers, or it’s not your server but a zyro site-builder?
Is there a way to overcome it? If no your hosting is useless for me((

#2

Also PHP doesn’t seem to work anymore

#3

Script are you using?

#4

what are you trying to build?

#5

I’m trying to make a “application for groups” in VK social network. And it required iframe to work. But vk blocked this site as a phishing one. But I made support guys let me add this site in iframe. But now… it doesn’t work because of those headers. Plus I suddenly realized that opening a php file in browser results in php source code as plain text in browser. same thing with ajax requests to php. But it used to work earlier…

#6

can you give me an example regarding this?

#7

I fixed it with php (turned out \r\n problem)… Anyway is there a way to change these headers:
X-Content-Type-Options:nosniff
X-Frame-Options:SAMEORIGIN
X-Xss-Protection:1; mode=block

#8

Removed X-Frame-Options ALLOWALL from server headers. Please try.

#9

Hmm. It’s not important anymore (I’ve given up that project then)… Thanks though! - I’ll try when I have time,

#10

I’ve tested it anyway (was too curious)) ). Thanks a lot it works!! Did you do this for my site personally or for “hosting as a whole”? I believe this might compromise security of your service… And am not sure wether it is worth it giving such GREAT OPPORTUNITIES on a FREE hosting!!)) Thanks though

1 Like