routing Http Response XFrame Options Header Value
Parameters
value
Indicates whether the browser is allowed to render a page in a frame, iframe, embed or object. Can only be set if protocol is HTTP
or HTTPS
for Application Load Balancers. Not supported for Network Load Balancer, or with a Gateway Load Balancer. The only valid values are DENY
, SAMEORIGIN
, or ALLOW-FROM https://example.com
.