title: How do I allow only 1 URL in my web app to be accessed via iframe?
body: <p>I'm running a <code>NodeJS</code> App on <code>NGINX</code> Web Server. I'm able to access all the URLs in my app via <code>iframe</code> on other websites. </p>
  
  <p>Here is my <code>NGINX</code> conf:</p>
  
  <pre><code>proxy_hide_header X-Frame-Options;
  </code></pre>
  
  <p>How do I restrict the iframe to allow only 1 URL instead of all the URLs?</p>
  
  <p>Also, how do I allow only a few domains to access via <code>iframe</code>?  </p>
  
  <p>Can it be done via <code>NGINX</code> or should it be handled via <code>NodeJS</code> code?</p>