Rabbit23_116296
Jan 28, 2016Nimbostratus
x-frame-options settings not working in APM
I have /my.policy overwriting every attempt I've made to disable this clickjacking protection. I have a frame that needs to access APM and this damn header is constantly getting set. Using BIGIP 12, I've run this in TMSH: tmsh modify /sys db apm.xframeoptions.allowfrom value none
Doesnt work...
tried it even in an iRule to replace or outright remove it:
when HTTP_REQUEST {
}
when HTTP_RESPONSE {
log local0.notice "removing header"
HTTP::header remove X-Frame-Options
}
when CLIENT_ACCEPTED {
ACCESS::restrict_irule_events disable
}
Any advice welcome.