[筆記]防止iframe嵌入

 <system.webServer>  

  <httpProtocol>

    <customHeaders>

      <add name="X-Frame-Options" value="SAMEORIGIN" />

    </customHeaders>

  </httpProtocol>

</system.webServer>

• value="SAMEORIGIN" 
• value="DENY"