Iframe X-Frame-Options: Sameorigin snafu

Sez Chrome... and every other browser

Uncaught SecurityError: Failed to read the 'contentDocument' property from 'HTMLIFrameElement': Blocked a frame with origin "http://domain.net" from accessing a frame with origin "http://webmail.domain.net"

It really sucks that I can't display my own subdomain in an iframe on my own domain.  Who comes up with this shit?  Excuse me while I go clickjack my own website

Stop setting the header then?

https://developer.mozilla.org/en-US/docs/Web/HTTP/X-Frame-Options

 RE

 If I could figure out how to stop sending the fckn header, I would.  Nice link, but I've looked at that on a hundred times already.  It tells you how to send the damn header... not how to stop it.

it tells you how to make cake, is it necessary for it to tell you how to eat one?

Just find the place where the header is being set and remove it. Whats on that sub domain anyway? If its application level, search for the string "x-frame-options" otherwise look into your host files of apache/nginx

RE: it tells you how to make cake, is it necessary for it to tell you how to eat one?

That's the problem.  The cake has been baked, and I'm forced to eat it.  I need to 'unbake' the cake and make something different.

 I've done that a hundred times.  The subdomain is roundcube email installed by Plesk 12.0.18, CentOS 6.5, PHP 5.3.3

If it were something in a conf file, I would have found it by now. 

RE: Just find the place where the header is being set and remove it??  Gee... why didn't I think of that?  Hmmm.. I wonder where the fckn thing is.

LOL< Why don't you tell us how you really feel?

Fckn A!

As it turned out, it had nothing to do with server configuration. Stupid fckn owncloud and their stupid shit in /lib/private/response.php

Break time. For some strange reason, I feel like baking a chocolate cake.

Anyway, the coder of the Roundcube plugin for ownCloud is trying to figure out how he's going to make his app work when RC is a subdomain install.  Time to go find something else that's AFU.... shouldn't be hard around here.