I'm having problems trying to display a Magento website on an iframe in another domain. Through the Admin Panel, I've already enabled the 'Allow Magento Frontend to run in frame'.

But when I try to open the webpage with the frame, it just doesn't load, also giving this console error in Chrome's Developer Tools:

Refused to display {{my test domain}}' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.

When I open the actual Magento website, I've also noticed that X-Frame-Options is still set to SAMEORIGIN.

I'm not sure where else to look to solve this, I'd appreciate any pointers or ideas! Thanks!

  • cleared the cache?
    – Jeroen
    Mar 11, 2015 at 22:23
  • yeah. Unfortunately, no luck :( Mar 11, 2015 at 22:29
  • Is it programmatic overridden for a site specific setting? Check your core_config_data table for the values for admin/security/domain_policy_frontend
    – Jeroen
    Mar 11, 2015 at 22:40
  • check if it has the value 1
    – Jeroen
    Mar 11, 2015 at 22:42
  • It's 1, and domain_policy_backend is 2. I'm guessing that 1 means 'allow'? Possibly this isn't a Magento problem, if that's the case... Mar 11, 2015 at 23:25

1 Answer 1


It's really Easy as magento taking care of everything. I found an option for the same in :

Magento Admin Panel => System (from main navigation) => Configuration (might be last in sub-menu list) => Admin (found at bottom in left options column) => Security Section (As shown in below image)

In Security section, there will be option to Allow Magento Frontend to run in frame. You can Enable that option.

Allow Magento to run in Frame

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.