OPTION call is getting fail with X-Frame-Options: DENY

[krushna_padhee_]

Hi,

When we are hitting our edge api, we are getting HTTP/1.1 500 Internal Server Error with OPTION call at first. I am doubting on the X-Frame-Options: DENY. the error message is mentioned below.

HTTP/1.1 500 Internal Server Error Content-Security-Policy: frame-ancestors 'none' Content-Type: application/json Date: Mon, 10 Dec 2018 14:16:01 GMT Strict-Transport-Security: max-age=86400 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1 Content-Length: 123 Connection: keep-alive

I try to add <Header name="X-Frame-Options">SAMEORIGIN</Header> in the response header, but that is not helping.

Can you please help me how to handle this in edge.

Regards,

Krushna

More information:

I am calling the api from a gui where I am getting a "no content" error. when i check in the developer tool of chrome, I am getting the error I described above.

And when I am checking the trace in edge, in response sent to client although it is giving 200 OK, but proxy post client flow is showing 500 Internal Server Error and the request is giving 500 response at the end.

Hope this is helpful to diagnose the problem.