spring-security 4.1 设置允许嵌套页面上的iframe

<beans xmlns="http://www.springframework.org/schema/beans" 
	xmlns:security="http://www.springframework.org/schema/security"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://www.springframework.org/schema/beans 
	   	   http://www.springframework.org/schema/beans/spring-beans-4.3.xsd
		   http://www.springframework.org/schema/security
      	   http://www.springframework.org/schema/security/spring-security-4.1.xsd">
……
<security:http ……>
      <!-- 设置允许嵌套iframe -->
      <security:headers><security:frame-options disabled="true"/></security:headers>
<security:http />
……
</beans>