H2 database console spring boot Load denied by X-Frame-Options - h2

Question

I`m building a skeletal project for dev with spring 4 boot security and others.
Using H2 while attempting to log into the db console and manage my db i get the following error. The page is blank, with 4 bugs in firebug konsole :
Load denied by X-Frame-Options: http://localhost:8080/console
With links to
/header.jsp?jsessionid=f71207a702c9177e57208414721bbe93 does not permit framing.
/query.jsp?jsessionid=f71207a702c9177e57208414721bbe93 does not permit framing.
/help.jsp?jsessionid=f71207a702c9177e57208414721bbe93 does not permit framing.
/tables.do?jsessionid=f71207a702c9177e57208414721bbe93 does not permit framing.
I can test the connection from console level - its ok.
DB works fine, import.sql works fine, i can create user entities withing spring is starting up.
The configuration i am using is from (and it works on spring 3.2 with xml configuration)
spring boot default H2 jdbc connection (and H2 console)
Using :
spring-boot-starter-parent
1.1.4.RELEASE

Answer 1

It's also possible to simplify the answer from #chrosciu with this:
#Configuration
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
#Override
protected void configure(HttpSecurity http) throws Exception {
http.headers().frameOptions().disable();
}
}

Answer 2

Added the code below to Application.java and for now it works, default on port 8082, starts with spring app. It doesn`t hit the spot but for dev purposes it is all ok.
#Bean
org.h2.tools.Server h2Server() {
Server server = new Server();
try {
server.runTool("-tcp");
server.runTool("-tcpAllowOthers");
} catch (Exception e) {
e.printStackTrace();
}
return server;
}

Answer 3

This worked for me:
#EnableWebSecurity
#Configuration
class WebSecurityConfig extends WebSecurityConfigurerAdapter {
#Override
protected void configure(HttpSecurity http) throws Exception {
http.headers().addHeaderWriter(
new XFrameOptionsHeaderWriter(
new WhiteListedAllowFromStrategy(Arrays.asList("localhost"))));
}
}
Of course contents of white list should be adjusted in case when application is running on something different than localhost.