Home/ Questions/Q 6592403
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-25T17:33:00+00:00

I want one external page to be embedded in my pages via IFRAME. Take

  • 0

I want one external page to be embedded in my pages via IFRAME.

Take an example:

My page contents:

 <html>
  <body>
  <iframe style="height: 593px; width: 100%;" src="http://xxx.com/test/"    name="urlPx2473258" id="urlPx_2473258"></iframe>
  </body>
 </html>

It’s in the captured HTTP packets as follows:

   Request===>
     `GET http://xxx.com/ HTTP/1.1
      Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/xaml+xml,     application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, */*
     Referer: https://plmtest2.apple.com/Agile/PLMServlet?module=LoginHandler&opcode=forwardToMainMenu
     Accept-Language: en-us
     User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
     Accept-Encoding: gzip, deflate
     Host: wikiserver.apple.com
     Connection: Keep-Alive

Response===>
 HTTP/1.1 200 OK
 Date: Wed, 14 Sep 2011 22:14:30 GMT
 Server: Twisted/8.2.0 TwistedWeb/8.2.0
 Content-Length: 15626
 Accept-Ranges: bytes
 Cache-Control: no-cache, no-store, must-revalidate, max-age=0, max-age=60
 Content-Type: text/html;charset=utf-8
 Expires: Wed, 14 Sep 2011 22:15:28 GMT
 MS-Author-Via: DAV
 X-Frame-Options: SameOrigin
 X-UA-Compatible: IE=EmulateIE7
 Connection: close`

As can be seen, the value is set to “SameOrigin”. However, the origin is app server and the frame content is from Wiki server. Therefore, the content cannot be displayed.

I can not make any changes for external page (out of my control). Is any idea I can archive this?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    The whole purpose of X-Frame-Options is to prevent other, potentially malicious web sites from doing exactly what you’re trying to do. You’ll need to find some way to turn it off at the source.

    • 0