how to set the X-Frame-Options in a content hosted by github?

Question

I want a html file to be loaded as iframe by any url, it's hosted by Github ..

This solution doesn't work :

<?php
header('X-Frame-Options: GOFORIT'); 
?>

And I suppose that we can't apply this one (mod_headers), so is there a way to do that ?

Answer 1

Support answer :

We block iframes to prevent clickjacking attacks against our users. We do this by sending the "X-Frame-Options: deny" header for every page. Clickjacking is a legitimate attack vector and at this time we do not have plans to remove the "X-Frame-Options: deny" header or allow exceptions for non-GitHub owned properties. It's unfortunate that such measures are necessary, but we have a responsibility to take all practical steps to protect our users.