Skip to content

Instantly share code, notes, and snippets.

@april
Created April 4, 2019 20:38
Show Gist options
  • Save april/b4f4db5ac7cb1c36d4d5840679d483b3 to your computer and use it in GitHub Desktop.
Save april/b4f4db5ac7cb1c36d4d5840679d483b3 to your computer and use it in GitHub Desktop.
All the crazy X-Frame-Options of the world. :)
"''
*, *, *
*
\""
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
"1; mode=block
1; SAMEORIGIN"
(9414 rows)
"Access, Access, SAMEORIGIN
*.aegon.hu, www.googletagmanager.com
ALL
ALL-FROM=http://washoe-nv.granicus.com
allow
Allow
ALLOW
ALLOW
ALLOW-ACCESS http://gars.nrw.de, ALLOW-ACCESS http://www.gars.nrw.de
ALLOW-ACCESS https://bloglovin.com/
ALLOW-ACCESS https://myavcadmin.avc.edu, https://myavc.avc.edu
ALLOW admin.dischem.co.za
allow-all
allowall
AllowAll
ALLOW_ALL
ALLOW-ALL
ALLOWALL
AllowAll, AllowAll
ALLOWALL, ALLOWALL
ALLOWALL, ALLOW-FROM
AllowAll, deny
ALLOWALL, DENY
ALLOW, ALLOW
ALLOW, ALLOW_FROM http://www.halkinhabercisi.com
allowall, SAMEORIGIN
AllowAll, SameOrigin
AllowAll, SAMEORIGIN
ALLOWALL, sameorigin
ALLOWALL, SAMEORIGIN
ALLOWANY
ALLOWED
ALLOW-FORM https://www.google.com
Allow-From: *
ALLOW FROM
ALLOW-FROM
ALLOW-FROM
ALLOW-FROM=103.75.34.218:9080, ALLOW-FROM=103.203.138.188:80
ALLOW_FROM ALL
ALLOW-FROM=app.monsido.com
ALLOW-FROM:awards.ratingruneta.ru
ALLOW-FROM=bricobravo.com,webvisor.com
ALLOW FROM carrilets.keclab.com
ALLOW FROM flyway-comparison-ui.prod.cni.digital
ALLOWFROM *.helloworld.co.nz
ALLOW-FROM=http://77.104.67.7/Portal/Home
ALLOW_FROM http://app.reskyt.com, SAMEORIGIN
ALLOW-FROM=http://app.vwo.com/
Allow-From: http://brief.media
Allow-From: http://campus.esdesignbarcelona.com
ALLOW=FROM http://cnbinternet.com
Allow-From: http://dev-crtg2016.pantheonsite.io
Allow-From: http://interconect.org.nz
Allow-From: http://intranet.eastcambs.gov.uk
ALLOW-FROM: http://intranet.hannahs.co.nz
ALLOW-FROM: http://intranet-ro.hq.ro-lm.corp.leroymerlin.com
ALLOW FROM http://kpayer.gq/, SAMEORIGIN
ALLOW FROM http://*.mukcbs.org
\"allow-from https://acecrm.my.salesforce.com\"
Allow-From: https://aclufoundationinc.marketing.adobe.com
ALLOW FROM https://admin.adapti.me/ https://cdn.adapti.me/ https://api.adapti.me/
ALLOW-FROM:https://aibk10.kuaishang.cn/
ALLOW_FROM https://allianzassistancehealth.com.au/en/auth/, https://www.oshcallianzassistance.com.au/
ALLOW FROM https://analytics.arsnova.cc/
ALLOW-FROM: https://api.ready.mobi
ALLOW_FROM https://app.monsido.com
ALLOW FROM https://apps.facebook.com/, SAMEORIGIN
ALLOW FROM https://asa-larsson.grup62.cat/ https://nomeselsfets.grup62.cat/ https://el-do.grup62.cat/ https://cremeubarcelona.grup62.cat/ https://elsecretdevesalius.grup62.cat/ https://aquest-llibre-lescrius-tu.grup62.cat/ https://algu-com-tu.grup62.cat/ https://correr-per-ser-lliure.grup62.cat/ https://la-vidua.grup62.cat/ https://la-malediccio-dels-palmisano.grup62.cat/ https://el-codi-da-vinci.grup62.cat/ https://aquest-estiu-llegir-te-premi.grup62.cat/ https://picalletres.grup62.cat/ https://genialment.grup62.cat/ https://laportadelstrespanys.grup62.cat/ https://bases-sorteig-la-forca-dun-desti-ampolla-jean-leon.grup62.cat/
Allow-From: https://certificadosaportantes.icbf.gov.co
ALLOW FROM https://demand.parrotanalytics.com
ALLOW FROM https://especialista.varilux.es/varilux-test
: ALLOW-FROM https://facebook.com
Allow-From: https://gocoop.com
ALLOW FROM https:https://lachicadeltren.planetadelibros.com.mx/ https:https://seriemillennium.planetadelibros.com.mx/ https:https://yuya.planetadelibros.com.mx/ https:https://que-sean-fuego-las-estrellas.planetadelibros.com.mx/ https:https://elregresodelcaton.planetadelibros.com.mx/ https:https://bibliotecaenriquekrauze.planetadelibros.com.mx/ https:https://vicentelenero.planetadelibros.com.mx/ https:https://universotolkien.planetadelibros.com.mx/ https:https://paidosempresa.planetadelibros.com.mx/ https:https://quicksand.planetadelibros.com.mx/ https:https://expedientespop.planetadelibros.com.mx/ https:https://tres-veces-tu.planetadelibros.com.mx/ https:https://carlota.planetadelibros.com.mx/ https:https://eres-un-chingon.planetadelibros.com.mx/ https:https://paula-hawkins.planetadelibros.com.mx/ https:https://austral-singular.planetadelibros.com.mx/ https:https://patria-prueba.planetadelibros.com.mx/ https:https://escrito-en-el-agua.planetadelibros.com.mx/ https:https://patria-trilogia.planetadelibros.com.
ALLOW FROM https:https://paidos-empresa.planetadelibros.com.co/
ALLOW FROM https://localbitcoins.com, Allow-From localbitcoins.com
ALLOW FROM https://matildeasensi.planetadelibros.com.ar/ https://miss-peregrine.planetadelibros.com.ar/ https://lealtad-a-la-marca.planetadelibros.com.ar/ https://lealtad-a-la-marca-2.planetadelibros.com.ar/ https://lealtad-a-la-marca-3.planetadelibros.com.ar/ https://lealtad-a-la-marca-4.planetadelibros.com.ar/ https://feriadellibro2018.planetadelibros.com.ar/ https://javiersierraenlaferia2018.planetadelibros.com.ar/ https://paulausterenlaferia2018.planetadelibros.com.ar/ https://marinaborenszteinenlaferia2018.planetadelibros.com.ar/ https://pilarsordoenlaferia2018.planetadelibros.com.ar/ https://felipepignaenlaferia2018.planetadelibros.com.ar/ https://elsapunsetenlaferia2018.planetadelibros.com.ar/ https://jurgenklaricenlaferia2018.planetadelibros.com.ar/ https://mariaduenasenlaferia2018.planetadelibros.com.ar/ https://dariosztajnszrajberenlaferia2018.planetadelibros.com.ar/ https://gravityfalls.planetadelibros.com.ar/ https://librovivo.planetadelibros.com.ar/ https://foreverannatodd.planetadelibros.com.ar
Allow-From: https://mghihp.edu
ALLOW FROM https://mgr.www.gov.tw
ALLOW-FROM: https://my3account.three.ie/
allow-from: https://my.livechatinc.com
ALLOW FROM https://norrskenhouse.officernd.com
allow-from: https://portal.mendfamily.com
ALLOW FROM https://sacrificio-a-molek.planetadelibros.com/ https://amytan.planetadelibros.com/ https://southern-reach.planetadelibros.com/ https://lospiranasdelfutbol.planetadelibros.com/ https://amigasdenuncajamas.planetadelibros.com/ https://marc-levy.planetadelibros.com/ https://crezcofeliz.planetadelibros.com/ https://donnaleon.planetadelibros.com/ https://jodiellenmalpas.planetadelibros.com/ https://trilogiaunanoche.planetadelibros.com/ https://venirse-arriba.planetadelibros.com/ https://el-mundo-de-teo.planetadelibros.com/ https://endgame.planetadelibros.com/ https://saga-waterfire.planetadelibros.com/ https://cronicasdefortuna.planetadelibros.com/ https://magisterium.planetadelibros.com/ https://after.planetadelibros.com/ https://serieafter.planetadelibros.com/ https://crossfire.planetadelibros.com/ https://arguinano.planetadelibros.com/ https://en-familia-con-karlos-arguinano.planetadelibros.com/ https://ultimaconfidencia.planetadelibros.com/ https://mundo-literario.planetadelibros.com/ https://aveni
allow from https://sauto.cz/
ALLOW FROM https://serimanga.com/
ALLOW FROM https://stats.sissa.it
ALLOW FROM: https://thread.worldmanager.com
ALLOW-FROM: https://tongji.baidu.com
ALLOW FROM https://ue.my.salesforce.com/
allow from https://vars.hotjar.com, allow from https://static.hotjar.com, allow from https://counter.personyze.com
Allow-From: https://webvisor.com
ALLOW FROM https://www.bilet.com
ALLOW_FROM https://www.campeche.gob.mx/ape
ALLOW FROM https://www.chasepaymentechhostedpay.com
Allow-From: https://www.dickssportinggoods.com
Allow-From: https://www.easycron.com
ALLOW-FROM=https://www.encuentra24.com/, ALLOW-FROM=https://m.encuentra24.com/
Allow-From: https://www.facebook.com
ALLOW-FROM=https://www.facebook.com
ALLOWFROM https://www.facebook.com
ALLOW-FROM=https://www.freelancebay.com
ALLOW-FROM=https://www.google.de,https://www.google.com
Allow-From: https://www.lonelyplanet.fr, *
Allow-From: https://www.mercy.edu
ALLOW-FROM=https://www.monsido.com
Allow-From: https://www.permanenttsb.ie
ALLOW FROM https://www.pta.gov.pk
ALLOW-FROM=https://www.rkantor.com
, ALLOW-FROM https://www.sindelfingen.de
Allow-From: https://www.vistazo.com
ALLOW-FROM=https://www.werally.com, ALLOW-FROM=https://accounts.werally.com, ALLOW-FROM=https://connect.dev.werally.in, ALLOW-FROM=https://connect.in.werally.in, ALLOW-FROM=https://connect.bluesteel.werally.in, ALLOW-FROM=https://connect.load-test.werally.in, ALLOW-FROM=https://connect.werally.com
ALLOW-FROM=https://www.youtube.com, ALLOW-FROM https://www.youtube.com
Allow-From: http://tehnouzel.ru
ALLOWFROM http://web1.idium.net
Allow-From: http://webvisor.com
, ALLOW-FROM http://webvisor.com
ALLOW FROM http://*.webvisor.com
ALLOW-FROM=http://webvisor.com
ALLOW-FROM=http://www.flunch.fr, ALLOW-FROM=https://www.flunch.fr, ALLOW-FROM=http://blog.flunch.fr, ALLOW-FROM=https://blog.flunch.fr, ALLOW-FROM=http://critizr.com, ALLOW-FROM=https://critizr.com, SAMEORIGIN
Allow-From: http://www.funivie.org, *
Allow-From: http://www.mhainulster.com
Allow-From: http://www.mustxhave.com
allow from http://www.myvideobox.it/
ALLOW_FROM http:// www.vaughan.ca
ALLOW-FROM: http://xxgk.dg.gov.cn, ALLOW-FROM: http://zwgk.dg.gov.cn
Allow-From: optimizely.com
ALLOW-FROM-ORIGIN : https://citizenportal-op.gov.in/
ALLOW-FROM=//s7.addthis.com, ALLOW-FROM=https://www.youtube.com, ALLOW-FROM=https://www.facebook.com, ALLOW-FROM=https://staticxx.facebook.com
ALLOW FROM SAMEORIGIN, SAMEDOMAIN, https://www.messenger.com/, https://www.facebook.com/
Allow-From: webvisor.com
ALLOW FROM webvisor.com
ALLOW-FROM=webvisor\\.com, SAMEORIGIN
Allow-From: www.ojavolteface.ca
ALLOW http://www.100000jobs.ch
ALLOW http://www.transparenciafiscal.am.gov.br
ALLOW INFOMONEY.COM.BR
ALLOW, SAMEORIGIN
ALLOWSAMEORIGIN
ALLOW=SAMEORIGIN, ALLOW=chat.visitor.chat
ALLOW www.incredible.co.za
ALOWALL, ALLOWALL
appotate.com
Array
â\u0080\u009CDENYâ\u0080\u009D
â\u0080\u009CDENYâ\u0080\u009D, SAMEORIGIN
â\u0080\u009CSAMEORIGINâ\u0080\u009D
â\u0080\u009CSAMEORIGINâ\u0080\u009D,â\u0080\u009CDENYâ\u0080\u009D
.Bank
BLAH
bsochsecurity.com
ChuGiong"
?column?
"CROSS-ORIGIN
dany
: deny
: DENY
\"DENY\"
\\\"DENY\\\"
DENY;
DENY, 1
DENY, Allow-From beta.arkansas.gov
DENY, ALLOW-FROM DENY
DENY, ALLOW-FROM https://inprwd.com/, https://video.inprwd.com/, http://inprwd.com/, http://video.inprwd.com/
Deny, Allow-From: https://stag1.purina.ru
DENY, ALLOW-FROM=http://www.lawnet.sg, ALLOW-FROM=http://test.datalex.org, SAMEORIGIN
DENY always;
DENY, â\u0080\u009CDENYâ\u0080\u009D
deny, deny
deny: deny
deny, DENY
Deny, Deny
Deny, DENY
DENY, deny
DENY, Deny
DENY, , DENY
DENY, DENY
DENY,DENY
DENY;, DENY
DENY, DENY, DENY
DENY, DENY, DENY, DENY
DENY, DENY, SAMEORIGIN
DENY, تشÙ\u0088با
DENY\r\n X-Content-Type-Options: nosniff
deny, sameorigin
deny, SAMEORIGIN
deny,SAMEORIGIN
Deny, Sameorigin
Deny, SameOrigin
Deny, SAMEORIGIN
DENY, sameorigin
(DENY || SAMEORIGIN)
DENY, SAMEORIGIN
DENY,SAMEORIGIN
deny, SAMEORIGIN, DENY
DENY, SAMEORIGIN | DENY
DENY, SAMEORIGIN, DENY
Deny, SAMEORIGIN, SAMEORIGIN
DENY, sameorigin, SAMEORIGIN
DENY, SAMEORIGIN, SAMEORIGIN
DENY, SAMEORIGIN, SAMEORIGIN, DENY
Deny, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
DENY, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
DENY, UDC CLOUD
deny x-xss-protection: 1; modeblock;x-content-type-options: nosniff;content-security-policy: default-src 'self' https: <https://cdn.thenovniatorcloud.com/>;script-src https: 'self' 'unsafe-inline' <https://cdn.thenovinatorcloud.com/> <https://www.google-analytics.com/> <https://www.google.com/> <https://www.gstatic.com/> <https://ajax.googleapis.com/> <https://code.jquery.com/>;img-src 'self' data: <https://cdn.thenovinatorcloud.com> <https://www.paypal.com> <https://www.paypalobjects.com> <https://syndication.twitter.com> <https://platform.twitter.com/widgets.js> <https://www.google-analytics.com/> <https://nxcentral.thenovinatorcloud.com>;style-src https: 'self' 'unsafe-inline';font-src https: <https://cdn.thenovinatorcloud.com>;strict-transport-security: max-age31536000 ; includesubdomains;vary: accept-encoding
*.encompassinsurance.com; *.encompassinsured.com
EXEMPT
false
FALSE
Firewall Web
Firewall Web, Firewall Web
FITMETRIX
FROM-ORIGIN https://www.facebook.com
GOFORIT
GOFORIT, ALLOW-FROM https://admin.capris.cr
GOFORIT, GOFORIT
GOFORIT, sameorigin
GOFORIT, SAMEORIGIN
Header always set X-Frame-Options \"SAMEORIGIN\"
Header set X-Frame-Options ALLOW-FROM https://shareeverywhere.epic.com
highspeedinternet.com
ht.ly/*
http://appnoticias.com.ar/, http://noti-rio.com.ar, http://agrovalle.com.ar, http://radiopatagonia905.com.ar, https://noticiasveintitres.com
http://googleads.g.doubleclick.net, http://yandexadexchange.net, http://tpc.googlesyndication.com, https://googleads.g.doubleclick.net, https://yandex.ru
https://app.factorialhr.com
https://bccondos.net
https://bluecore.lookbookhq.com
https://branches.eg-bank.com/
https://desk.teachergaming.com
https://dovercorporation.gcs-web.com
https://dxy.com https://tongji.baidu.com
http://selene.tjba.jus.br https://www.tjba.jus.br
https://fm.i9sports.com
https://go.contentools.com/
^https?:\\/\\/([^\\/]+.)?(hostinghub.ru|webvisor.com)\\/
https://*.hotjar.com
https://*.keepsolid.com, https://*.simplexsolutionsinc.com, https://*.vpnunlimitedapp.com
https://mgr.cpc.com.tw
^https?:\\/\\/([^\\/]+\\.)?(mosreklama\\.ru|ramedor\\.ru|webvisor\\.com)\\/
https://my333408.crm.ondemand.com/
https://nootica.fr
https://oidc.tanet.edu.tw https://sso.cloud.edu.tw
https://pbspcareers.pbsp.org.ph/
https://portais.fabricawebsis.com.br
https://psa.digitalinsight.com
https://qa-dcs-portal.lifetechnologyservices.com https://dcs-portal.lifetechnologyservices.com
https://totalwine.com/,
http?(s)://*.umt.edu
https://us.castlighthealth.com
^https?:\\/\\/([^\\/]+\\.)?(webvisor\\.com)\\/
https://wfyi.org
https://www.edu.tw
https://www.facebook.com
https://www.familienportal.de
https://www.jobs.ch
https://www.ptc.com
https://www.standvirtual.com
https://www.vitalis-poitiers.fr/wordpress/wp-admin/customizer.php
https://www.yapikredi.com.az/
https://www.yourglass.com
https://www.youtube.com/
https://www.zim.de
^https?:\\/\\/([^\\/]+\\.)?(x-cart\\.ru|webvisor\\.com)\\/
https://yastatic.net
http://webvisor.com/
HTTP://WORDPRESS.PANIC.FI
http://www.acxtelecom.net.br
http://www.bmwi.de
http://www.dwt.com.br
http://www.dxlabsuite.com/pathfinder/WebClient/
http://www.yoyaku.city.suginami.tokyo.jp,http://www.yoyaku-shukai.city.suginami.tokyo.jp,http://www.yoyaku-sports.city.suginami.tokyo.jp,https://www.yoyaku.city.suginami.tokyo.jp,https://www.yoyaku-shukai.city.suginami.tokyo.jp,https://www.yoyaku-sports.city.suginami.tokyo.jp
http://youtube.googleapis.com
�DENY�
_MAGE_DISABLED
MANUALMODERNO
master-only
Medbank
*.mta.gov.tr
newsge.ru
NO1
NONE
nosniff
OH AH HUNG
ololo, DENY
origin
ORIGIN
*.pageproof.com
promise.iu.edu
SAME103.21.183.192
SAMEDOMAIN
SAMEDOMAIN, ALLOW-FROM https://lcwaikiki.panel.sociaplus.com, ALLOW-FROM optimizely.com, ALLOW-FROM optimizelyedit.com
SAMEDOMAIN, ALLOW-FROM HTTPS://LCW.SAAS.APPDYNAMICS.COM
SAMEOGIRIN, \"ALLOW-FROM http://caulfieldhospital.org.au\", \"ALLOW-FROM https://*.screen.cloud\", \"ALLOW-FROM http://localhost:8702\"
SAMEOIGIN, SAMEORIGIN
SAMEORGIGIN
sameorgin
SAMEORGIN
SAMEORGINE
SAMEORIGEN
SAMEORIGEN, SAMEORIGEN
SAMEORIGI
SAMEORIGI;, DENY
SAMEORIGIM
: sameorigin
same-origin
sameorigin;
, SAMEORIGIN
: SAMEORIGIN
'SAMEORIGIN,'
\"SAMEORIGIN\"
\\\"SAMEORIGIN\\\"
SAME-ORIGIN
SAMEORIGIN ?>
SAMEORIGIN,
SAMEORIGIN, *
SAMEORIGIN;
SAMEORIGIN/
SAMEORIGIN, 1; RequireReadOnly
SAMEORIGIN2
SAMEORIGIN, 46.105.77.174
SAMEORIGIN, : Allow
SAMEORIGIN, ALLOW
SAMEORIGIN, allowall
SAMEORIGIN, ALLOWALL
SAMEORIGIN, ALLOW-FROM
SAMEORIGIN, ALLOW-FROM *
SAMEORIGIN, ALLOW-FROM
SAMEORIGIN ALLOW-FROM *.bpcl.in
sameorigin, allow-from escanav.com.*, sameorigin
SAMEORIGIN, allow-from *.force.com
SAMEORIGIN, ALLOW-FROM http://1tv.kz, ALLOW-FROM https://1tv.kz, ALLOW-FROM http://euroasia.lfstrm.tv
SAMEORIGIN, ALLOW-FROM http://as.grayling.com/
SAMEORIGIN, ALLOW-FROM http://epicor.lookbookhq.com
SAMEORIGIN, ALLOW-FROM http://oficinavirtual.esval.cl/esval.php
SAMEORIGIN ALLOW-FROM http://partner.skype.pchome.com.tw
SAMEORIGIN, ALLOW-FROM=https://4933238.fls.doubleclick.net, ALLOW-FROM=https://www.googletagmanager.com
SAMEORIGIN, allow-from https://admin.heatmap.vn/
SAMEORIGIN, ALLOW-FROM https://alestra.mx/
sameorigin ALLOW-FROM https://antibotnet.osi.es
SAMEORIGIN, ALLOW-FROM https://api.hackertarget.com/
SAMEORIGIN, ALLOW-FROM https://app.frontapp.com/
SAMEORIGIN, Allow-From https://app.optimizely.com
SAMEORIGIN, ALLOW-FROM https://app.optimizely.com
SAMEORIGIN, ALLOWFROM https://app.optimizely.com
SAMEORIGIN, ALLOW-FROM https://apps.facebook.com
SAMEORIGIN, ALLOW-FROM https://apps.facebook.com/smurfapp https://www.facebook.com/Fibank/app/416515932017218/
SAMEORIGIN, ALLOW-FROM https://assets.zendesk.com
SAMEORIGIN, ALLOW-FROM=https://baselstadt.piwik.pro
SAMEORIGIN, ALLOW-FROM https://beta.doradcasmaku.pl/profil-promocja/*
SAMEORIGIN, allow-from https://catalogs.bellacanvas.com
SAMEORIGIN ALLOW-FROM https://confluence.smida.gov.ua/ https://jira.smida.gov.ua/
SAMEORIGIN ALLOW-FROM https://design-use.ci360.sas.com
SAMEORIGIN, ALLOW FROM https://dogasigorta.com/
SAMEORIGIN ALLOW-FROM https://dsx.hessen-agentur.de
SAMEORIGIN, ALLOW-FROM https://*.ffapaysmart.com.au:*, SAMEORIGIN
SAMEORIGIN; ALLOW-FROM https://hr.rcwilley.com; ALLOW-FROM https://rcwadmin.rcwilley.com
SAMEORIGIN, ALLOW-FROM https://hubhopper.com/
SAMEORIGIN, ALLOW-FROM https://intranet.tucsonaz.gov/
SAMEORIGIN, ALLOW-FROM https://jira.alexandra.dk
SAMEORIGIN, ALLOW-FROM https://login.newsmaxfeednetwork.com/
SAMEORIGIN, ALLOW-FROM https://metrica.yandex.com
SAMEORIGIN, : ALLOW-FROM https://my.itsme.be/
SAMEORIGIN, ALLOW-FROM https://pbfy.com
SAMEORIGIN, ALLOW-FROM https://spokanetalksmedia.com/youth-spotlight/, ALLOW-FROM http://www.khq.com/
SAMEORIGIN, ALLOW-FROM http://studenthelp.com.ua?ForOrigin=webvisor.com
SAMEORIGIN, ALLOW-FROM https://uat-vna.cs58.force.com
SAMEORIGIN, allow-from https://umfrage.rehm-verlag.de/
SAMEORIGIN, ALLOW-FROM https://vars.hotjar.com
SAMEORIGIN, allow-from https://webvisor.com/, allow-from http://webvisor.com/
SAMEORIGIN ALLOW-FROM https://weloveweather.tv/ http://www.rcmp-f.net/news/horse-auction/ https://www.girlventures.org/ https://www.inboardtechnology.com/ http://mortoncommunityfoundation.org http://bgclt.org/SilentAuction/ https://www.rainforesttrust.org/ https://www.unpackinit.com/golf/ https://www.katiesartproject.org/ http://www.ilcanada.ca/ http://seaofchange.com/ https://www.rezvanfoundation.com/ https://www.ourmothershome.com/ https://www.joytothekids.org/
SAMEORIGIN, ALLOW-FROM https://wertgutscheine.optiopay.com/
SAMEORIGIN, ALLOW-FROM https://www.3creports.com
SAMEORIGIN, ALLOW-FROM https://www.azleg.granicus.com/
SAMEORIGIN, ALLOW-FROM https://www.bajajfinserv.in, ALLOW-FROM https://www.bajajfinserv-homes-and-loans.in, ALLOW-FROM https://customer-login.bajajfinserv.in, ALLOW-FROM https://www.bajajfinservmarkets.in
SAMEORIGIN ALLOW-FROM https://www.dashoefer.de
SAMEORIGIN, ALLOW-FROM https://www.edge-link.omron.co.jp
SAMEORIGIN, ALLOW-FROM https://www.edge-link.omron.com
SAMEORIGIN ALLOW-FROM https://www.expresspainting.com
SAMEORIGIN ALLOW-FROM https://www.facebook.com
SAMEORIGIN, ALLOW-FROM https://www.facebook.com
SAMEORIGIN, ALLOW-FROM https://www.facebook.com/
SAMEORIGIN, ALLOW-FROM https://www.kuwaitcourts.gov.kw/
SAMEORIGIN, ALLOW-FROM https://www.messenger.com/, ALLOW-FROM https://www.facebook.com/
SAMEORIGIN ALLOW-FROM https://www.optimizely.com
SAMEORIGIN, ALLOW-FROM https://www.optimizely.com
SAMEORIGIN, allow-from https://www.qs1support.com
SAMEORIGIN, ALLOW-FROM https://www.scbeic.com, SAMEORIGIN
sameorigin, allow-from https://www.sterlingadministration.com/
SAMEORIGIN,ALLOW-FROM https://www.visionsuper.com.au/intranet.html,ALLOW-FROM https://www.visionsuper.com.au/images/employer-intranet-final.html
sameorigin, allow-from https://www.vsekastingi.ru/
SAMEORIGIN, ALLOW-FROM https://www.xactware.com/
SAMEORIGIN, ALLOW-FROM https://www.youtube.com/
SAMEORIGIN, ALLOW-FROM https://www.youtube.com
SAMEORIGIN ALLOW-FROM https://yandex.com/ https://webvisor.com
SAMEORIGIN;ALLOW-FROM https://youtube.com
SAMEORIGIN, ALLOW-FROM http://webvisor.com/
SAMEORIGIN, ALLOW-FROM http://www.dinersclubaccessnet.com/, ALLOW-FROM http://www.dinersclubglobalnet.com/
SAMEORIGIN, ALLOW-FROM http://www.growingio.com
SAMEORIGIN, ALLOW-FROM http://www.indiantradeportal.in/ITPSearchWindow.jsp https://www.facebook.com/
SAMEORIGIN, ALLOW-FROM http://www.messenger.com
SAMEORIGIN ALLOW-FROM http://www.notai.it,http://notais.gruppomol.lcl
SAMEORIGIN, ALLOW-FROM http://www.ogilvy.com
SAMEORIGIN ALLOW-FROM http://zabbix.ceki.ru
SAMEORIGIN, ALLOW-FROM jinzhus.com
SAMEORIGIN ALLOW-FROM optimizely.com
SAMEORIGIN; ALLOW-FROM RESOURCE-URL
SAMEORIGIN, ALLOW-FROM //s7.addthis.com
SAMEORIGIN, ALLOW-FROM \thttps://googleads.g.doubleclick.net/
SAMEORIGIN, allow-from http://www.otelnet.com.tr/
\"SAMEORIGIN\" always
SAMEORIGIN always
sameorigin *.bir.no
SAMEORIGIN, dailymotion.com
sameorigin | deny
sameorigin, DENY
SAMEORIGIN, deny
SAMEORIGIN, Deny
SAMEORIGIN**, Deny
SAMEORIGIN, : DENY
SAMEORIGIN, DENY
SAMEORIGIN,DENY
SAMEORIGIN, DENY, ALLOW-FROM http://metrika.yandex
SAMEORIGIN, DENY, DENY
SAMEORIGIN, DENY, DENY, DENY, DENY
SAMEORIGIN, (DENY || SAMEORIGIN)
SAMEORIGIN, DENY, SAMEORIGIN
SAMEORIGIN, Deny|Sameorigin|Allow-From
SAMEORIGINE
sameorigin etherpad.meine-freiheit.de intranet.meine-freiheit.de
SAMEORIGIN, GOFORIT
SAMEORIGIN; HttpOnly
SAMEORIGIN, https://branches.eg-bank.com/
SAMEORIGIN, https://contacto.sernatur.cl
SAMEORIGIN https://elife.twfhclife.com.tw
'SAMEORIGIN' http://webvisor.com/*
SAMEORIGIN\r\n X-Content-Type-Options: nosniff
SAMEORIGIN, SAMEDOMAIN
SAMEORIGIN, SAMEORGIN
sameorigin, sameorigin
sameorigin, SAMEORIGIN
Sameorigin, Sameorigin
SameOrigin, sameorigin
SameOrigin, SameOrigin
SameOrigin, SAMEORIGIN
SAMEORIGIN, sameorigin
SAMEORIGIN, Sameorigin
SAMEORIGIN, SameOrigin
\"SAMEORIGIN\", SAMEORIGIN
SAME-ORIGIN, SAMEORIGIN
SAMEORIGIN, : SAMEORIGIN
SAMEORIGIN, SAMEORIGIN
SAMEORIGIN, SAMEORIGIN
SAMEORIGIN,SAMEORIGIN
SAMEORIGIN, SAMEORIGIN, ALLOW
SAMEORIGIN, SAMEORIGIN, AllowAll
SAMEORIGIN, SAMEORIGIN, ALLOW-FROM https://alestra.mx/
SAMEORIGIN, SAMEORIGIN, ALLOW-FROM https://univiapru.unicajabanco.es, ALLOW-FROM https://univiapre.unicajabanco.es, ALLOW-FROM https://canary.unicajabanco.es, ALLOW-FROM https://univia.unicajabanco.es, ALLOW-FROM https://intpru.unicajabanco.es, ALLOW-FROM https://intpre.unicajabanco.es, ALLOW-FROM https://int.unicajabanco.es
SAMEORIGIN, SAMEORIGIN, allow-from https://www.malayan.com/
SAMEORIGIN, SAMEORIGIN, deny
SAMEORIGIN, SAMEORIGIN, Deny
SAMEORIGIN, SAMEORIGIN, DENY
sameorigin, SAMEORIGIN, SAMEORIGIN
SameOrigin, SAMEORIGIN, SAMEORIGIN
SAMEORIGIN, sameorigin, sameorigin
SAMEORIGIN, sameorigin, SAMEORIGIN
SAMEORIGIN, SameOrigin, SameOrigin
SAMEORIGIN, SAMEORIGIN, sameorigin
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
SAMEORIGIN,SAMEORIGIN,SAMEORIGIN
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, Deny
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, DENY
SAMEORIGIN,SAMEORIGIN,SAMEORIGIN, DENY
SameOrigin, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, sameorigin
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
SAMEORIGIN,SAMEORIGIN,SAMEORIGIN,SAMEORIGIN,SAMEORIGIN
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, DENY
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, DENY
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
SAMEORIGIN, SAMEORIGN
SAMEORIGINS, DENY
SAMEORIGIN, strict-origin-when-cross-origin
SAMEORIGIN, \u0093SAMEORIGIN\u0094
SAMEORIGIN, undef
SAMEORIGIN;www.metrolisboa.pt
SAMEORIGIN; www.sendo.vn; nhacso.net
SAMEORIGINx
SAMEORIGION
SAMEORIGN
SAMEORIGN, ALLOW-FROM https://tripadvisor.com, ALLOW-FROM https://tripadvisor.nl, ALLOW-FROM https://www.tix.nl*
SAMEOROGIN
secured, DENY
self
SELF
SMAEORIGIN
srchmgrh.com
strict-origin-when-cross-origin
TDB
TRUE
TUYNDOAN
\u0093SAMEORIGIN\u0094
\\u201cDENY\\u201d
undef
vagonochka.ru
vasaloppet.se
webvisor.com
*.wheretostay.com
www.caracoltvcorporativo.com
www.justfont.com
www.ubb.cl
X-FRAME-OPTIONS ALLOW_FROM https://api-test.allianz.com https://www.allianzworldwidecare.com
X-Frame-Options: ALLOW-FROM https://www.uralairlines.ru/
X-Frame-Options: SAMEORIGIN
X-XSS-Protections
zhazhi.com"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment