Where would I change the "X-Frame-Options" header when running FusionAuth from a RPM package

[joshua]

I set it in nginx, that is running in front of FA, but FA seems to overwrite/ force the header.

[joshua]

Hi,

I might need some more details, but one place to start is reviewing the setting panel for CORS.

There is also a recent related post about X-Frame-Headers here.

Any more details about what you are trying to accomplish might helpful.

Thanks,
Josh

[felix]

Setting the "Allowed origins" in the Application settings did the trick.