title: X-Frame-Options and frames
body: <p>I did set X-Frame-Options DENY in the apache configuraiton file. </p>
  
  <pre><code>Header always append X-Frame-Options DENY
  </code></pre>
  
  <p>I can see that the  server response contain X-Frame-Options DENY at headers but the iframe on the page is still visible.</p>
  
  <p>What I'm doing wrong?</p>