#只允许同源的iframe引用
Header always append X-Frame-Options SAMEORIGIN
#例外
Header append X-Frame-Options "ALLOW-FROM http://form.js.ntjsfz.net/"