谷歌浏览器访问提示X-Frame-Options http://baidu.com ALLOW-FROM' is not a recognized directive 消息头无效

在类中设置了response.setHeader("X-Frame-Options","ALLOW-FROM https://baidu.com/"); 火狐嵌套网址访问正常显示谷歌嵌套网址访问的时候被嵌套的网址输入用户名密码登录没有反应完整错误消息:Invalid 'X-Frame-Options' header encountered when loading '

404 Not Found https://www.baidu.com/'

: 'ALLOW-FROM' is not a recognized directive. The header will be ignored.