- You can add to
.htaccess,httpd.conforVirtualHostsection Header set X-Frame-Options SAMEORIGINthis is the best option
Allow from URI is not supported by all browsers. Reference: X-Frame-Options on MDN
.htaccess, httpd.conf or VirtualHost sectionHeader set X-Frame-Options SAMEORIGIN this is the best optionAllow from URI is not supported by all browsers. Reference: X-Frame-Options on MDN