Issue my site is not displaying on other sites, using iframe

[costasias81]

Server operating system version

linux

Plesk version and microupdate number

Plesk Obsidian 18.0.50

i want to allow any website to display my site, using iframes.
but I don't understand how to remove the lock they display, connection denied


can someone tell me how to remove this limitation on my server
use nginx, I tried to enter on the

Apache & nginx Settings​

but the block persists, what do I do? someone help me thanks

 

[Peter Debik]

Maybe this issue occurs due to missing CORS header. Please see this KB article for a solution:

https://support.plesk.com/hc/en-us/articles/115001338265-How-to-set-up-CORS-cross-origin-resource-sharing-in-Plesk-for-Linux-

 

[costasias81]

still not showing up!
can anyone help me, such a simple thing and i can't solve it, how do i make my site display in iframes

 

[Vladimir.Ponomarev]

Hi!

You use header X-Frame-Options with "ALLOW-FROM" option that is deprecated (more info here: X-Frame-Options - HTTP | MDN)
Try to use "Content-Security-Policy" header (Content-Security-Policy - HTTP | MDN)

 

[costasias81]

I did a test on Test for modern Internet Standards like IPv6, DNSSEC, HTTPS, DMARC, STARTTLS and DANE.
although it turns out your web server does not offer securely configured X-Frame-Options.
the iframes are still not displayed, maybe it depends on a block on the domain ip? dns?

 

[Vladimir.Ponomarev]

maybe it depends on a block on the domain ip? dns?

If you can open url from iframe as regular site and it looks good, then it not depends on ip or dns, or something.

 

[costasias81]

what could be blocking the view, if the test does not show any active blocks

 

[mow]

maybe the version without the extra headers is still cached somewhere?

 

[costasias81]

maybe the version without the extra headers is still cached somewhere?

i just cleared the cache but nothing, iframe doesn't allow viewing, can anyone help me

 

[costasias81]

I solved!

 

[mow]

How?