**Background**: I'm integrating an external CMS into Magento, and using a module in Magento to render the preview for the CMS. This happens within an iFrame.

---

In Magento 1.9.0.0 [the `core/domainpolicy` observer](https://github.com/OpenMage/magento-mirror/blob/magento-1.9/app/code/core/Mage/Core/Model/Domainpolicy.php#L66-L91) was added which allows for the X-Frame-Options header to be set for admin and frontend.

In my instance, this header is preventing me from using my preview route (`/my/content/preview` for example) from being loaded within an iFrame from the CMS>

How can I disable this functionality for a specific controller?

It's observing the `controller_action_predispatch` event.