Ref Articles:
- http://support.microsoft.com/kb/2694329
- https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options
- http://onlinecurriculumvitae.com/Article/Index/MVC-NET-Security
Questions: Consider my site is hosted as, http://abc.mydomain.com and https://abc.mydomain.com
1. Is the following format to append multiple X-Frame-Options allowed in the
web.config? And does it work?
<system.webServer><httpProtocol> <customHeaders>
<add name="X-Frame-Options" value="ALLOW-FROM https://any1.seconddomain.com" /> Go to the complete details ...