Invalid X-Frame-Options header. '' is not a recognized directive

I use iframe payment in Zuora. In short, you download the Zuora library to give you access to an object Zcontaining Zuora API methods. Using Z.render()to make a payment form in an iframe.

When loading an iframe, this error is displayed in the console:

Invalid 'X-Frame-Options' Header when loading '[URL-HERE]': ' ' is not a recognized directive. The header will be ignored.

Based on MDN docs for X-Frame Options , directives are available DENY, SAMEORIGINor ALLOWFROM [URL].

Is this directive supposed to be installed on our server by running a request? Or is this a problem in the e-commerce API?

+4
source share

Source: https://habr.com/ru/post/1680238/


All Articles