I have an almost similar question as Overcoming "Display forbidden by X-Frame-Options" but what if the URL is external and not on the same domain?
Fixed it creating an nginx proxy with proxy_hide_header X-Frame-Options