logoalt Hacker News

chneulast Tuesday at 3:13 PM1 replyview on HN

Some browsers actually block embedded pages. Lots of mozilla based browsers will.


Replies

input_shlast Tuesday at 6:19 PM

No, it's the website owners setting a specific header (X-Frame-Options to SAMEORIGIN), as it prevents someone else from embedding your website and phishing for user credentials.

No browser prevents that by default, but this tip is found in pretty much every "best practices" hosting tutorial, so it's very common to stumble upon that browser error in the wild.