aspnetboilerplate：删除x-frame-options标头

Question

在我的基于aspnetboilerplate的网站中，如何从asp.net核心响应中删除X-Frame-Options: SAMEORIGIN标头。

我尝试了什么1.

        string MyAllowSpecificOrigins = "_myAllowSpecificOrigins";
        services.AddCors(options =>
        {
            options.AddPolicy(MyAllowSpecificOrigins,
            builder =>
            {
                builder.WithOrigins("http://www.example.org/",
                                    "https://www.example.org/");
            });
        });

 app.UseCors(MyAllowSpecificOrigins);

2. 也尝试在启动时添加此内容

   services.AddAntiforgery(x => x.SuppressXFrameOptionsHeader = true);

3. 添加到web.config <remove name="X-Frame-Options"/>

Answer 1

按如下所示初始化abp框架：

        app.UseAbp(options =>
        {
            options.UseSecurityHeaders = false;
        }); // Initializes ABP framework.