X-Frame-Options: Nginx includes header twice

wishmaster artemrts at ukr.net
Sat Jan 25 07:51:25 UTC 2014

 --- Original message ---
 From: "Some Developer" <someukdeveloper at gmail.com>
 Date: 25 January 2014, 06:04:10

> I'm running Nginx 1.4.4 on Ubuntu 12.04 and have added the X-Frame-Options header for one of my sites but in testing it appears that Nginx includes this itself in addition to user configured headers. Basically I want X-Frame-Options to be DENY but when I set that header Nginx also sends an X-Frame-Options SAMEORIGIN header so that there are two X-Frame-Options headers in every request.
> Is there some way to disable the extra header? I can't find anything in my configuration that would add the second header. 

 May by this is the header, has been set by your php-application?
 You can remove this with help of module http://wiki.nginx.org/HttpHeadersMoreModule

More information about the nginx mailing list