Tag Info

New answers tagged

14

Review: Same-origin policy First, let's clarify that the behavior observed here (the iframe does not render) is much stricter than the default same-origin policy. If you already understand that, skip down to "What's actually happening," below. To review, the same-origin policy prevents scripts from having programmatic access to the contents of cross-origin ...


35

The administrators of security.stackexchange.com have configured the site to not let it be framed on other sites. This is usually done to prevent clickjacking attacks, to prevent others from embedding security.stackexchange.com into a page full of ads, and to save traffic. You may read more about X-Frame-Options header here. This protection is off by ...



Top 50 recent answers are included