title: X-Frame-Options on Apache
body: <p>I am trying to allow some particular domain to access my site via iframe</p>
  <pre><code>Header set X-Frame-Options ALLOW-FROM https://www.example.com
  </code></pre>
  <p>I know this could be done by add the line above to the config of Apache server.</p>
  <p>Two questions here.</p>
  <ol>
  <li><p>which config file should be added to? The Apache running on both Unix and windows, if not the same file</p>
  </li>
  <li><p>while enable the all-from, I still want to be able to run some iframe from my own domain. Can I just add the following line after the allow-from?</p>
  <p>Header set X-Frame-Options SAMEORIGIN</p>
  </li>
  </ol>
  <p>Or I should just add my own domain in the all-from, ie</p>
  <pre><code> Header set X-Frame-Options ALLOW-FROM https://www.example.com, http://www.my-own-domain.example
  </code></pre>