FAQ: Embedded Website Is Not Displayed

When you try to embed a website using an <iframe> on your own page, it may not display. Instead, the browser developer tools show the following error message:

This means: the target website only allows itself to be displayed in a frame if the embedding page uses the same domain – this is known as the “sameorigin” policy.

Many websites use the following HTTP header for security reasons:

This prevents the website from being embedded via <iframe> on external domains – a protection mechanism against so-called clickjacking attacks. Unfortunately, this also blocks display on digital signage systems like FRAMR., even when embedding would be technically desired.

In the current firmware version, the FRAMR. Player ignores the X-Frame-Options header when rendering websites. This means:

• Even websites that send X-Frame-Options: SAMEORIGIN will be displayed correctly.

• This works on all FRAMR. Players with the current firmware (based on Chromium).

• No additional configuration is required.

Important: This applies only to signage playback on FRAMR. Players, not to the preview in the browser within the Cockpit!

If you embed a website in the FRAMR. Cockpit and it doesn’t display in the preview, this is not a bug in FRAMR. – it’s your browser that blocks the X-Frame-Options header.

For preview and testing purposes, you can use one of the following browser extensions to force the display anyway:

Plugins to Ignore X-Frame-Options

• Chrome
  Ignore X-Frame headers: Removes X-Frame headers from HTTP responses
  🔗 https://chromewebstore.google.com/detail/gleekbfjekiniecknbkamfmkohkpodhe
  
  
• Firefox
  IFrame allow: Allows displaying pages with SAMEORIGIN headers
  🔗 https://addons.mozilla.org/de/firefox/addon/iframe-allow/
  
  
• Edge
  Ignore X-Frame headers for Edge: Same function as Chrome version
  🔗 https://microsoftedge.microsoft.com/addons/detail/ignore-xframe-headers/fdjaajmmdllgndlgjgmdgklgfhnlabdm
  
  
• Opera
  Install Chrome extension support + use Chrome plugin: Opera supports Chrome extensions via an add-on
  
• Safari
  No direct support – instead, use the FRAMR. Player preview for testing

If a website absolutely cannot be embedded (e.g., due to dynamic security checks), you can:

• Use a screenshot and display it as an image.

• Manually recreate the key content using HTML or text inside FRAMR.

• If the site offers an API, create your own custom visualizations (e.g., using FRAMR.’s HTML element).