title: How Can I Bypass the X-Frame-Options: SAMEORIGIN HTTP Header?
body: <p>I am developing a web page that needs to display, in an iframe, a report served by another company's SharePoint server. They are fine with this. </p>
  
  <p>The page we're trying to render in the iframe is giving us X-Frame-Options: SAMEORIGIN which causes the browser (at least IE8) to refuse to render the content in a frame. </p>
  
  <p>First, is this something they can control or is it something SharePoint just does by default? If I ask them to turn this off, could they even do it? </p>
  
  <p>Second, can I do something to tell the browser to ignore this http header and just render the frame?</p>