auino
auino

Reputation: 1656

Load Facebook into an iframe

I can't load facebook into an iframe, in a web page like the following one:

<html>
<head>
<!-- some stuffs here -->
</head>
<body>
<!-- some stuffs here -->
<iframe src="http://www.google.com" frameborder="0">
</iframe>
</body>
</html>

I've tested it with other websites and it seems to load without problems for instance for wired.com, but not for facebook.com...

Can anyone explain me why?

I'm using Google Chrome and Safari, if needed.

It seems to be as if Google blocks iframe loading of its page.

Upvotes: 9

Views: 32960

Answers (2)

samuirai
samuirai

Reputation: 772

If you use Firebug or Google Chrome's developer console, you can see the following error

Refused to display document because display forbidden by X-Frame-Options.


X-Frame-Options

DENY
The page cannot be displayed in a frame, regardless of the site attempting to do so.

SAMEORIGIN
The page can only be displayed in a frame on the same origin as the page itself.

Here is another related stackoverflow question Overcoming “Display forbidden by X-Frame-Options”

Upvotes: 15

Ali Khalid
Ali Khalid

Reputation: 1345

Google and Facebook are using a X-Frame-Options in the HTTP response header to avoid the content being loaded in a iFrame.

The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a or . Sites can use this to avoid clickjacking attacks, by ensuring that their content is not embedded into other sites.

Source: https://developer.mozilla.org/en/The_X-FRAME-OPTIONS_response_header

I don't think it is possible for you to override this setting.

Upvotes: 7

Related Questions