Overcoming “Display forbidden by X-Frame-Options”

by

I had a similar issue, where I was trying to display content from our own site in an iframe (as a lightbox-style dialog with Colorbox), and where we had an server-wide “X-Frame-Options SAMEORIGIN” header on the source server preventing it from loading on our test server.

This doesn’t seem to be documented anywhere, but if you can edit the pages you’re trying to iframe (eg., they’re your own pages), simply sending another X-Frame-Options header with any string at all disables the SAMEORIGIN or DENY commands.

eg. for PHP, putting 

<?php
    header('X-Frame-Options: GOFORIT'); 
?>

at the top of your page will make browsers combine the two, which results in a header of

X-Frame-Options SAMEORIGIN, GOFORIT

…and allows you to load the page in an iframe. This seems to work when the initial SAMEORIGIN command was set at a server level, and you’d like to override it on a page-by-page case.

All the best!

More Related Contents:

  1. Getting around X-Frame-Options DENY in a Chrome extension?
  2. Youtube iframe wmode issue
  3. Failed to load resource: net::ERR_INSECURE_RESPONSE
  4. Content script for iframe inside extension popup or background script
  5. Iframe scrolling iOS 8
  6. Is there a cross-domain iframe height auto-resizer that works?
  7. Apply a Greasemonkey/Tampermonkey userscript to an iframe
  8. Angular, onLoad function on an iFrame
  9. contentDocument for an iframe
  10. Inserting the iframe into react component
  11. google homepage will not load in an iframe
  12. Load an iframe asynchronously
  13. How can I Gmail?
  14. using postmessage to refresh iframe’s parent document
  15. Can Cross-Origin Resource Sharing headers authorize X-Domain IFRAME access?
  16. Print iframe content in Opera and Chrome
  17. YouTube Autoplay does not work with iFrame
  18. Making an iframe responsive
  19. Safari 3rd party cookie iframe trick no longer working?
  20. How to pick element inside iframe using document.getElementById
  21. Creating an iframe with given HTML dynamically
  22. jQuery iframe load() event?
  23. z-index does not work in Internet Explorer with pdf in iframe
  24. iframe with external page not working
  25. Is there a way to change context to iframe in javascript console?
  26. How to synchronize scrolling positions for several iframes
  27. How to center an iframe horizontally?
  28. AngularJS ng-src inside of iframe
  29. Detect X-Frame-Options
  30. iframe contents cant appear in Firefox

Leave a Comment