Search code examples
javascriptasp.netgoogle-chromex-frame-options

Refused to display, set X-Frame-Options to SAMEORIGIN

I have a very old site built in ASP .Net 2008 by an external team who I have no contact with. All of a sudden a page doesn't seem to render properly in Chrome and FireFox but works fine with other browsers. The page is set with an iFrame.

Looking under Inspect Element (Chrome) for the page failing to render I see the error

Refused to display 'http://www.example.com/somepage.html' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN, SAMEORIGIN'.

So read a few articles and I may not understand this fully but it seems to me the error is, the domain requested will NOT allow itself to be displayed within a frame.

The URL above is not the URL I am familiar with (i.e. its third party, I don't have any control with it). Is there anyway to resolve this or is this purely the owner of the domain would have to allow? IF so why does it work in other browsers?

Solution

  • Is there anyway to resolve this

    Not at your end.

    or is this purely the owner of the domain would have to allow?

    This

    IF so why does it work in other browsers?

    Speculating a little here, but SAMEORIGIN, SAMEORIGIN is not a valid value. It looks like Chrome is attempting error recovery and treating it as SAMEORIGIN