title: Multiple X-Frame-Option refuses to show in-frame
body: <p>I have an awful situation</p>
  <p>A website with <strong>Apache2+Php5.6</strong>, one of the pages of the site has a <code>&lt;iframe&gt;</code> tag but it refuses to load because <strong>X-Frame-Options</strong> was set in more than one php file inside the web archives with differentes values (DENY and SAMEORIGIN) falling to DENY.</p>
  <blockquote>
  <p>Refused to display '<em>webpage</em>' in a frame because it set multiple 'X-Frame-Options' headers with conflicting values ('DENY, SAMEORIGIN'). Falling back to 'deny'.</p>
  </blockquote>
  <p>I try to set X-Frame-Option in security.conf or with .htaccess but when the page use that particular file, it overrides the value and finish into the same situation.</p>
  <blockquote>
  <p>Refused to display '<em>webpage</em>' in a frame because it set multiple 'X-Frame-Options' headers with conflicting values ('<strong>SAMEORIGIN</strong>,DENY, SAMEORIGIN'). Falling back to 'deny'.</p>
  </blockquote>
  <p>My questions</p>
  <ul>
  <li>¿Is there a way to override all response headers of my page?, or</li>
  <li>¿Is it posible to find in which php file X-Frame-Option was set?</li>
  </ul>
  <p>I know that is posible to disable X-Frame-Option but <strong>i don't want that</strong> if there is any other posible solution or workaround.</p>
  <p>Thanks in advance</p>
  <p>UPDATE</p>
  <p>It was a nginx server working as reverse proxy in top of my configuration with that property settet to DENY, hoppefully i manage to reach that configuration and now it work perfectly</p>