title: X-Frame-Options: ALLOW-FROM a particular domain in wildfly
body: <p>I have an application that's deployed on wildfly on a centos server.</p>
  
  <p>I have two other applications that access a page of my application using <code>iframe</code>. What I access that I page, that's all I see in console:</p>
  
  <pre><code>1 Refused to display 'APP_URL' in a frame because it set 'X-Frame-Options' to 'deny'. 
  </code></pre>
  
  <p>I know the reason behind this all and I want to allow my wildfly web-server to allow it from my 2 domains like this</p>
  
  <p><code>X-Frame-Options: ALLOW-FROM https://example.com/</code></p>
  
  <p>where can I configure this setting in wildfly? I know about apache server, it's done in <code>httpd.conf</code> file but I want to do this in wildfly.</p>