xfo-whitelist

Apply X-Frame-Options based on a whitelist