send_frame_options_header()

Sends a HTTP header to limit rendering of pages to same origin iframes.

Contents

Description
- See also
Source
Changelog
User Contributed Notes

Description

See also

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options

Source

File: wp-includes/functions.php. View all references

function send_frame_options_header() {
	header( 'X-Frame-Options: SAMEORIGIN' );
}

View on Trac View on GitHub

Changelog

Changelog
Version	Description
3.1.3	Introduced.

User Contributed Notes

Skip to note 1 content

You must log in to vote on the helpfulness of this noteVote results for this note: 0You must log in to vote on the helpfulness of this note

Contributed by esquire900 — 3 years ago

For those who would like to change this behavior, try using .htaccess instead of modifying this function directly, i.e.

Header always unset X-Frame-Options

Log in to add feedback

You must log in before being able to contribute a note or feedback.