I'd like to be able to embed certain file previews from SharePoint Online in another domain - in fact, I'd like to do it for 2 extra domains.
Is it possible to replace this header...
with this one?
X-Frame-Options: ALLOW-FROM https://example.com/ https://example2.com/
Or is this just a limitation of SharePoint Online?
OneDrive and OneDrive for Business don't add the
X-Frame-Options: SAMEORIGIN header, so I can embed from OneDrive. SharePoint Online is more restrictive.