title: Allowing my site to be embedded on a iFrame
body: <p>My Nginx server sets the X-Frame header to DENY, this is so far good. But now I need to allow  just one page of my site to be embedded on an iframe outside of my domain.</p>
  
  <p>I tried to solve this on the application level using php inside the controller that serves the web page:</p>
  
  <pre><code>header('X-Frame-Options: ALLOW-FROM 127.0.0.1');
  </code></pre>
  
  <p>But the response when i tried to embed the page on an external iframe was:</p>
  
  <pre><code>X-Frame-Options:ALLOW-FROM 127.0.0.1
  X-Frame-Options:DENY
  </code></pre>
  
  <p>So is concatenating the options (the one set of the nginx config with the one set on the app code)? So, how can i allow a single page of my server to be embedded on an external iframe?</p>