i got following error when i click on mailto: link in colorbox.
its work without color box, but unfortunately i need to use color box.
i tried header(‘X-Frame-Options: GOFORIT’); but it does’t work.
and it show following error message in console.
Refused to display document because display forbidden by X-Frame-Options.
Any idea?
I’ve never messed with X-Frame-Options (though I did work directly for the guy that wrote the book on clickjacking). According to Mozilla, there are only two acceptable values:
And these are returned by the iframed source server, which it sounds like you have control over. Both of which are defensive, not permissive.
What happens if you turn off the header outright?
Also, to avoid issues with users who use their web mail client (like me) who may not want to leave the colorbox or have the webmail client bound in an iframe, try setting
target="_blank"on the link. Perhaps escaping the iframe will alleviate other issues.