HTML Iframes

[Joshua Swafford]

Did HTML update to where you can't go to a site with a Iframe anymore?

If you try to go to a site in a Iframe now you get these errors: 

 

1. Refused to frame 'https://www.w3schools.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self' https://mycourses.w3schools.com".

2. Refused to display 'https://www.google.com/' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

[Ingolme]

For security purposes, website owners can forbid their website from being displayed in an iframe on a different website.

[Joshua Swafford]

On 8/11/2021 at 6:29 PM, Ingolme said:

For security purposes, website owners can forbid their website from being displayed in an iframe on a different website.

Would there be a way to bypass this? Or somehow run a server on localhost that goes to the website which then can be linked to?

[Ingolme]

The iframe restrictions cannot be bypassed because they are there to protect people from malicious websites which may put a familiar website into an iframe to steal passwords and other personal data.

If you have access to a server-side programming language, you can use it to send HTTP requests and load content from other websites, but It is not simple to do properly.