Question

55

how to block website from loading in iframe?

rated 0 times [ 56] [ 1] / answers: 1 / hits: 67625 / 11 Years ago, thu, november 7, 2013, 12:00:00

Recently i tried to load youtube website in an iframe, but i checked that it's not worked. i used this simple code.

<!DOCTYPE html>

<html>

<head>

<title></title>

</head>

<body>

<iframe width=1000px height=700px src=http://www.youtube.com ></iframe>

</body>

</html>

i want to know , why my webpage can't load youtube website in
iframe..

what code i use to load the youtube website in my webpage.

how i use same techniq in my website, so no one can add my website
in iframe.

Answers

Only authorized users can answer the question. Please sign in first, or register a free account.

jenamackennac

Add To Favorites

Follow

Total Points: 304

Total Questions: 110

Total Answers: 107

Location: Ecuador

Member since Thu, Jun 4, 2020

4 Years ago

jenamackennac questions

1 React render PDF file inside component based on API response

Fri, Feb 18, 22, 00:00, 2 Years ago

1 Webpack error: configuration.module.rules[0] has an unknown property 'query'

Mon, Aug 30, 21, 00:00, 3 Years ago

1 Vue is not defined/not a constructor

Wed, Apr 21, 21, 00:00, 3 Years ago

1 WebView2 - Get an attribute

Thu, Apr 1, 21, 00:00, 3 Years ago

1 IntersectionObserver API and TypeScript

Tue, Feb 2, 21, 00:00, 3 Years ago

View All

answered 11 Years ago ericmaximilianz · Accepted Answer

For modern browser, need to enable X-Frame-Options in Header,
The x-frame-options header can be implement through web server configuration settings.

You can view the X-Frame-Options in Header as like below image,

Reference: https://www.keycdn.com/blog/x-frame-options/

If your browser does not support it, then you will have NO clickjacking defense in place and can use HTTP Header Field X-Frame-Options,

  <meta http-equiv=X-Frame-Options content=deny>

There are three possible values for X-Frame-Options:

DENY -
The page cannot be displayed in a frame, regardless of the site attempting to do so.

SAMEORIGIN -
The page can only be displayed in a frame on the same origin as the page itself.

ALLOW-FROM uri -
The page can only be displayed in a frame on the specified origin.