I need to frame a page being served by SharePoint 2010’s xlsviewer.aspx but this page is setting the HTTP response header X-FRAME-OPTION to SAMEORIGIN, so IE8 refuses to render the page in a frame on another domain, which is what I need.
It appears that no other pages being served by this SharePoint instance set X-FRAME-OPTIONS, only _layouts/xlsviewer.aspx
Where can I change the HTTP headers or framing options for SharePoint or this specific page?
Relevant headers:
GET //_layouts/xlviewer.aspx?id=whatever.xlsx&DefaultItemOpen=1
is returning:
HTTP/1.1 200 OK
. . .
X-Frame-Options: SAMEORIGIN
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
MicrosoftSharePointTeamServices: 14.0.0.4730
This info is wrong. Solution can be found on http://www.moss2007.be/blogs/vandest/archive/2012/01/03/sharepoint-2010-office-web-apps-and-iframes.aspx
Check more discussion of this question.
