当你尝试在Spring Boot项目中使用iframe标签时，浏览器会报“in a frame because it set ‘X-Frame-Options’ to ‘deny’.”的错误。解决办法如下：

 
@EnableWebSecurity
public class WebSecurityConfig extends
        WebSecurityConfigurerAdapter {

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            // ...
            .headers()
                .frameOptions().sameOrigin()
                .httpStrictTransportSecurity().disable();
    }
}

 

 
转自：https://www.jianshu.com/p/a9bfcc443149