0

I've set X-Frame-Options 'x-frame-options' => '*', in env as mentioned in the doc Magento Docs

But still I'm getting this error

Refused to display 'https://mythridpartyurlhere.com/' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

1
+50

Just because you allow iframes to load from any URL it does not mean the third party resource allows you to.

If you read the error carefully it mentions the third party URL itself has sameorigin set and not your Magento installation.

Refused to display 'https://mythridpartyurlhere.com/' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

There is nothing you can do about this, the third party does not allow you to load this resource in an iframe on your website.

To confirm this check the response headers on the resource:

enter image description here

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.