title: Nothing will unset X-Frame-Options (Apache, PHP 5.3)
body: <p>I'm trying to implement an embeddable widget, functioning similar to a Twitter embedded tweet.  The simplest solution, though maybe not the best, appears to be an iframe or HTML5 embed - but both are being blocked by the X-Frame-Options header on the server.</p>
  
  <p>I'm running PHP 5.3 and Apache 2.2 on a dedicated server under my full control.</p>
  
  <p>I've tried placing on the first line of the very first line of the iframe PHP file:</p>
  
  <pre><code>header_remove("X-Frame-Options");
  </code></pre>
  
  <p>I've tried adding the following to .htaccess:</p>
  
  <pre><code>Header unset X-Frame-Options
  </code></pre>
  
  <p>I've checked httpd.conf, the vhost .conf file, even PHP.INI, and searched for "x-frame" - nothing apparently relevant in either.  </p>
  
  <p>No mod_security or other plugins that should be injecting this on this server that I see.</p>
  
  <p>Yet curl verifies the following HTTP header no matter what I do:</p>
  
  <pre><code>X-Frame-Options: DENY
  </code></pre>
  
  <p>Is there some, maybe oddly named setting somewhere that could still be forcing this header in?  </p>