I want to temporarily remove X-Frame-Options: SAMEORIGIN
and need to allow all domains.
I have already tried the following ways.
-
Removing
send_frame_options_header
from./wp-includes/default-filters.php
-
remove_action('login_init', 'send_frame_options_header');
-
Removing
@header( ‘X-Frame-Options: SAMEORIGIN’ );
from/wp-includes/functions.php
None of the above doesn’t work.
PS: I don’t use any security plugin either.