Forum Discussion
WAF_Engineering
Jul 30, 2019Nimbostratus
We wish to do this as well. In our example we wish to allow from multiple domains such as:
A.com
B.com
C.com
Are these comma separate values? Semi-colon separated values? spaces inbetween or not? After implementing the change (no errors in web-ui), and generating test traffic, the x-frame-options header was NOT present in the response and we're not sure why.