HTML - Embed Iframe

[AEMLearner-1989]

The below script is not working on embed component. 

<iframe src="https://www.w3schools.com" title="W3Schools Free Online Web Tutorials">
</iframe>

[Umesh_Thakur · Accepted solution]

Hi @AEMLearner-1989 ,

This issue you are facing, It seems due to XSS protection config, that is based on OWASP recommnedation.

So to enable it you need to enable the iframe in the config file. but that is not recommended.

OR

ELse you can use some jquery or vanila js to implement such thing using client libs.

Hope this will help

Umesh Thakur

[BrianKasingli]

@AEMLearner-1989, can you please share the error message from your console please?

[Kiran_Vedantam]

Hi @AEMLearner-1989,

You cant show many websites in an iFrame. Reason: An "X-Frame-Options: SAMEORIGIN" response header is set. which prevents the browser from displaying iFrames that are not hosted on the same domain [like parent page]. Its a security feature to prevent click-jacking.

Hope this helps.

Thanks,

Kiran Vedantam.