title: Refused to display 'http://127.0.0.1:8000/files/xxx.pdf' in a frame because it set 'X-Frame-Options' to 'sameorigin' in Node Express API
body: <p>As answered in <a href="https://stackoverflow.com/questions/46998540/how-to-set-x-frame-options-in-express-js-node-js">this question</a> applied the solution but still not able to bind the PDF in an iframe of other origin project. See the <a href="https://i.stack.imgur.com/lr1vi.png" rel="nofollow noreferrer">console error</a> I am getting.</p>
  
  <p>Solution I applied : </p>
  
  <pre><code>app.use(helmet.frameguard({
    action: 'allow-from',
    domain: 'http://localhost:4200'
  }))
  </code></pre>
  
  <p>Is there any other issue or am I doing some mistake?</p>
  
  <p>Thanks</p>