Can Oracle iPlanet support X-Frame-Options & where/how to set it ?

Posted on 2014-11-11
Medium Priority
Last Modified: 2014-11-13
I've got the information on where to set X-Frame-Options for IIS, Apache (& I guess Oracle
Web server being a variant of Apache, we also insert the same code into .htaccess of oracle
Web server).

Now for Oracle iPlanet web server, where do I insert this line of code?
In obj.conf ,  .nsconfig , magnus.conf or ?

We are running Oracle iPlanet V6.1 & V7.

What's the command to restart the iPlanet service for the change to take effect?
Question by:sunhux
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2

Author Comment

ID: 40434827
Oracle support emailed me to refer to
Doc ID 406587.1  without providing the exact url/link to download it.

Anyone care to attach a copy of the above doc?
LVL 64

Accepted Solution

btan earned 2000 total points
ID: 40436497
Q1. You can check this out on the ref for the obj.conf
more info on the "https-server_id" in below which explain the use of diff config file available

You may want to note the dynamic reconfiguration that may not necessarily need restart

Good to start off on the basic in administration and understanding the server console (GUI) and CLI (wadm) https://docs.oracle.com/cd/E19146-01/821-1828/gbrne/index.html

As for the doc, it is better to login into user portal and do doc search (i have no access though)

Q2. In general, you can catch more info in the server instance command in e.g. restart-instance, start-instance or stop-instance https://docs.oracle.com/cd/E19146-01/821-1828/gdhdz/index.html

Author Comment

ID: 40439736
Thanks very much.

Oracle got back with more detailed example:

In V6.1, edit instance-dir/config/obj.conf
In V7, edit instance-dir/config/<virtual-server-name>.obj.conf

add in the line after the last ‘Service method’:


ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service method="TRACE" fn="service-trace"

Above shows 2 ‘Service method’; add line below after the last ‘Service method’:

 ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service method="TRACE" fn="service-trace"
Output fn="set-variable" insert-srvhdrs="X-FRAME-OPTIONS: SAMEORIGIN"
LVL 64

Expert Comment

ID: 40439742
thanks for sharing

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
This story has been written with permission from the scammed victim, a valued client of mine – identity protected by request.
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…
In this video, Percona Solution Engineer Dimitri Vanoverbeke discusses why you want to use at least three nodes in a database cluster. To discuss how Percona Consulting can help with your design and architecture needs for your database and infras…
Suggested Courses

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question