Load Denied By X-Frame-Options: "http://test.test.net/Feedback/Create?appId=TestApp" Does Not Permit Cross-origin Framing Using MVC5

I'm working on a website that's hosted on my company network and only accessible from within the network, so I have no concern with cross-domain requests. Anyways, this particula

Solution 1:

Putting this in Global.asax worked for me:

protected void Application_PreSendRequestHeaders(object sender, EventArgs e)
{
    HttpContext.Current.Response.Headers.Remove("X-Frame-Options");
}

Apparently there's a difference between MVC4 and MVC5, where it worked in MVC4, but not in MVC5, which is what I'm using.

Solution 2:

You should set this response header on the application that you are including inside the iframe.