Enabling or Disabling X-Frame-Options in the web.xml File

You have to change the default OFSAA setting for X-Frame-Options from SAMEORIGIN to ALLOW-FROM in the web.xml file to embed OFSAA content on your site.

The following is the procedure to modify the web.xml file:

1. Open the web.xml file in an editor.
2. Search for the following tag:
   <filter>
   <filter-name>FilterServlet</filter-name>
   <filter-class>com.iflex.fic.filters.FilterServlet</filter-class>
   </filter>
3. Add the following tag before the tag shown in the preceding step:
   <filter>
   <filter-name>FilterServletAllowFrom</filter-name>
   <filter-class>com.iflex.fic.filters.FilterServlet</filter-class>
   <init-param>
   <param-name>mode</param-name>
   <param-value>ALLOW-FROM https://example.com/</param-value>
   </init-param>
   </filter>
   <filter-mapping>
   <filter-name>FilterServletAllowFrom</filter-name>
   <url-pattern>/url1</url-pattern>
   </filter-mapping>
4. Replace https://example.com/ with the URL of your site and replace /url1 with the OFSAA relative URL. This embeds OFSAA content on your site.