I have created an action message as below and attached it to Target Endpoint's preFlow but I am still able to add our api proxy url calls into an iframe. May I know what is the right way to do this? Thanks in advance. I am totally new to Apigee.
<AssignMessage async="false" continueOnError="false" enabled="true" name="add-cors">
<DisplayName>Add CORS</DisplayName>
<FaultRules/>
<Properties/>
<Add>
<Headers>
<Header name="X-Frame-Options">SAMEORIGIN</Header>
</Headers>
</Add>
<IgnoreUnresolvedVariables>true</IgnoreUnresolvedVariables>
<AssignTo createNew="false" transport="https" type="response"/>
</AssignMessage>
LinkedIn
Twitter
