Load Denied By X-frame-options: "http://test.test.net/feedback/create?appid=testapp" Does Not Permit Cross-origin Framing Using Mvc5

I'm working on a website that's hosted on my company network and only accessible from within the network, so I have no concern with cross-domain requests. Anyways, this particula

Solution 1:

Putting this in Global.asax worked for me:

protectedvoidApplication_PreSendRequestHeaders(object sender, EventArgs e)
{
    HttpContext.Current.Response.Headers.Remove("X-Frame-Options");
}

Apparently there's a difference between MVC4 and MVC5, where it worked in MVC4, but not in MVC5, which is what I'm using.

Solution 2:

You should set this response header on the application that you are including inside the iframe.