title: X-Frame-Options SAMEORIGIN blocking iframe on my domain
body: <p>i'm using <a href="http://www.jacklmoore.com/colorbox">http://www.jacklmoore.com/colorbox</a> to display the content of an url in a lightbox.
  after implementation, the colorbox did'nt showed anything.</p>
  
  <p>Later, i noticed the following error in chrome logs:</p>
  
  <pre><code>Refused to display document because display forbidden by X-Frame-Options.
  </code></pre>
  
  <p>so after documenting i added the following line to the root .htaccess of the website :</p>
  
  <pre><code>Header always append X-Frame-Options SAMEORIGIN
  </code></pre>
  
  <p>to allow iframe embedding on my own domain.</p>
  
  <p>But i still get the error, i'm newbie to x-frame, and i'm working on an existing application, so i thought the .htaccess solution would be nice, but can it be overrided by some code ? Notice that it's not in the server configuration.</p>