How to set header for CORS and X-Frame-Options?

[Zaniyar]

I installed the wordpress:latest image on a webapp on azure (1 click install..). How can I set the x-frame-options to be allowed from specific hosts? Setting this options on Wordpress alone in .htaccess did not help; headers are getting overriden.