Disabling X-FRAME-OPTION: SAMEORIGIN HTTP Response Header on SharePoint/PowerPivot xlsviewer.aspx

Posted by Daniel Coffman on Server Fault See other posts from Server Fault or by Daniel Coffman
Published on 2010-05-20T17:36:08Z Indexed on 2010/05/20 17:40 UTC
Read the original article Hit count: 1386

I need to frame a page being served by SharePoint 2010's xlsviewer.aspx but this page is setting the HTTP response header X-FRAME-OPTION to SAMEORIGIN, so IE8 refuses to render the page in a frame on another domain, which is what I need.

It appears that no other pages being served by this SharePoint instance set X-FRAME-OPTIONS, only _layouts/xlsviewer.aspx

Where can I change the HTTP headers or framing options for SharePoint or this specific page?

Relevant headers: GET //_layouts/xlviewer.aspx?id=whatever.xlsx&DefaultItemOpen=1

is returning: HTTP/1.1 200 OK . . . X-Frame-Options: SAMEORIGIN X-AspNet-Version: 2.0.50727 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 14.0.0.4730

© Server Fault or respective owner

Related posts about sharepoint

Related posts about PowerPivot