title: tomcat X-Frame-Options or antiClickJackingEnabled
body: <p>I am looking for an answer strictly for tomcat webserver. I am need to call a different domain using iframe and it is giving the following error in internet explorer</p>
  
  <blockquote>
    <p>This content cannot be displayed in a frame To help protect the
    security of information you enter into this website, the publisher of
    this content does not allow it to be displayed in a frame.</p>
  </blockquote>
  
  <p>I know this is cross domain issue and i am trying to enable it in tomcat webserver. I have search internet for a day and i dont see a clear answer on how to configure either X-Frame-Options or antiClickJackingEnabled</p>
  
  <p>I used the following option in web.xml but it did not work</p>
  
  <pre><code>&lt;filter&gt;
          &lt;filter-name&gt;httpHeaderSecurity&lt;/filter-name&gt;
          &lt;filter-class&gt;org.apache.catalina.filters.HttpHeaderSecurityFilter&lt;/filter-class&gt;
          &lt;async-supported&gt;true&lt;/async-supported&gt;
          &lt;init-param&gt;
                  &lt;param-name&gt;antiClickJackingOption&lt;/param-name&gt;
                  &lt;param-value&gt;ALLOW-FROM&lt;/param-value&gt;
          &lt;/init-param&gt;
  &lt;/filter&gt;
  &lt;filter&gt;
          &lt;filter-name&gt;httpHeaderSecurity&lt;/filter-name&gt;
          &lt;filter-class&gt;org.apache.catalina.filters.HttpHeaderSecurityFilter&lt;/filter-class&gt;
          &lt;init-param&gt;
                  &lt;param-name&gt;antiClickJackingUri&lt;/param-name&gt;
                  &lt;param-value&gt;[https://subdomain1.example.com][https://subdomain2.example.com][https://subdomain3.example.com]&lt;/param-value&gt;
          &lt;/init-param&gt;
  &lt;/filter&gt;
  </code></pre>
  
  <p>Please help!!!</p>