• Resolved offpeakdesign

    (@offpeakdesign)


    Hi, our site is not embeddable onto other sites. I understand this may be a security feature. If so, how would I set it to either allow sites to embed or whitelist those sites?
    Thank you

Viewing 2 replies - 1 through 2 (of 2 total)
  • Thread Starter offpeakdesign

    (@offpeakdesign)

    I also have this in the htaccess file, which may be related:

    Header always set Strict-Transport-Security: “max-age=31536000” env=HTTPS
    Header always set X-XSS-Protection “1; mode=block”
    Header always set X-Content-Type-Options “nosniff”
    Header always set Referrer-Policy: “no-referrer-when-downgrade”
    Header always set Expect-CT “max-age=7776000, enforce”
    Header always set X-Frame-Options “sameorigin”
    Header always set Content-Security-Policy “upgrade-insecure-requests”`

    Plugin Support wfphil

    (@wfphil)

    Hi @offpeakdesign

    If you are referring to iframes then removing the line below should fix it:

    Header always set X-Frame-Options “sameorigin”

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘allow embedding’ is closed to new replies.