title: Header set X-Frame-Options "SAMEORIGIN" won't work with URL shortener CTA button
body: <p>I want to use a url shortener CTA (Call-To-Action) button. I was told for the CTA to work with my site, I had to disable:<br>
  <code>Header set X-Frame-Options "SAMEORIGIN"</code>
  in my .htaccess file.</p>
  
  <p>This option was set by my security software.</p>
  
  <p>The url shortener worked after I commented out that line.</p>
  
  <p>I also had to add a url to my CNAME (lets say <code>link.shorten.click</code>) in the DNS to make this work - that was part of the instructions.</p>
  
  <p>But, is there a way to keep the security while allowing this CTA button to work, like making some exception? Not sure if the CNAME url can be used for the exception as I don't know what it does.</p>
  
  <p>I'm just including it in case it helps.</p>
  
  <p>I just sent a note to the developer / owner of the url shortener. But, it was just now. I thought I would post here as well.</p>
  
  <h2>Background of this url shortener</h2>
  
  <p>I just want to add what this url shortener CTA button does and how it works in case it helps. So, in my login with the 3rd-party dashboard, I create a link. I did it on a subdomain: click.example.com/dd3id</p>
  
  <p>And that link will redirect a user to the target, let's say: www.example.com.</p>
  
  <p>And then a "pop-up" box will slide in with whatever message I added.</p>
  
  <p>And that's what this url shortener CTA box does.</p>