简体   繁体   English

加载'allow-from https 时遇到无效的'X-Frame-Options' header 不是公认的指令。 header 将被忽略

[英]Invalid 'X-Frame-Options' header encountered when loading 'allow-from https is not a recognized directive. The header will be ignored

In chrome it is having issue to redirect based on this option allow from in aspx page在 chrome 中,基于此选项允许在 aspx 页面中重定向时存在问题

ALLOW-FROM is generally not very well supported: https://caniuse.com/?search=allow-from ALLOW-FROM 一般不太支持: https://caniuse.com/?search=allow-from

The good news is that you can set X-Frame-Options ALLOW-FROM that works for IE11 and also set Content-Security-Policy frame-ancestors directive that works for all the others.好消息是您可以设置适用于 IE11 的 X-Frame-Options ALLOW-FROM 并设置适用于所有其他的 Content-Security-Policy frame-ancestors 指令。 When frame-ancestors is set, X-Frame-Options is ignored, so you will not get that error message.设置 frame-ancestors 时,X-Frame-Options 将被忽略,因此您不会收到该错误消息。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM