I followed this to configure self signed certificate on Apache I get the "Load denied by X-Frame-Options"

Load denied by X-Frame-Options: https://xxxxxxxxxx/get_data.php?action=71&productid=1&fee=[{"feeid":"1","feename":"SIL PESA PF"}]&valfutureinterest=1&valaccrueinterest=1&valallowloantopup=0&valpercentageoftopuploanpaid=0 does not permit framing

SecurityError: Permission denied to access property “document” on cross-origin object


Submit an answer
You can type!ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

I sorted this one out! On the step to edit the /etc/apache2/conf-available/ssl-params.conf

Just changed from Header always set X-Frame-Options DENY to Header always set X-Frame-Options: " ALLOW-FROM https:// …"

worked fine!

I also have this warning: Strict-Transport-Security: The connection to the site is untrustworthy, so the specified header was ignored.