Enabling or Disabling X-Frame-Options in the web.xml File

You have to change the default OFSAA setting for X-Frame-Options from SAMEORIGIN to ALLOW-FROM in the web.xml file to embed OFSAA content on your site.

The following is the procedure to modify the web.xml file:

1.      Open the web.xml file in an editor.

2.     Search for the following tag:

<filter>

<filter-name>FilterServlet</filter-name>

<filter-class>com.iflex.fic.filters.FilterServlet</filter-class>

</filter>

3.     Add the following tag before the tag shown in the preceding step:

<filter>

   <filter-name>FilterServletAllowFrom</filter-name>

   <filter-class>com.iflex.fic.filters.FilterServlet</filter-class>

   <init-param>

       <param-name>mode</param-name>

       <param-value>ALLOW-FROM https://example.com/</param-value>

   </init-param>

</filter>

<filter-mapping>

   <filter-name>FilterServletAllowFrom</filter-name>

   <url-pattern>/url1/</url-pattern>

</filter-mapping>

4.    Replace https://example.com/ with the URL of your site and replace /url1/ with the OFSAA relative URL. This embeds OFSAA content on your site.