Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

No, it's the website owners setting a specific header (X-Frame-Options to SAMEORIGIN), as it prevents someone else from embedding your website and phishing for user credentials.

No browser prevents that by default, but this tip is found in pretty much every "best practices" hosting tutorial, so it's very common to stumble upon that browser error in the wild.



Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: