Answers.Body: <p>Drupal core is now protected against clickjacking by default:
  <a href="https://www.drupal.org/node/2735873" rel="nofollow noreferrer">https://www.drupal.org/node/2735873</a></p>
  
  <p>You can install Security Kit module -> and then add specific allow-from domains.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2017-02-08T13:23:53.603Z
Answers.LastActivityDate: 2017-02-08T13:23:53.603Z
Answers.UserDisplayName: KarinG - Semper IT
Body: <p>I used to be able to embed CiviCRM forms in Iframes without issue. 
  Recently, I haven't been successful and getting this error: </p>
  
  <p>Refused to display '<a href="http://website.com/civicrm/event/register?id=2" rel="nofollow noreferrer">http://website.com/civicrm/event/register?id=2</a>' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.</p>
  
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2017-02-08T00:02:32.887Z
Comments.Text: Is this an iframe on the same domain or a different one?
Comments.UserDisplayName: Jon G - Megaphone Tech
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2017-02-08T00:14:51.647Z
Comments.Text: Different domain
Comments.UserDisplayName: Yossi
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2017-02-08T00:21:49.927Z
Comments.Text: In that case, it sounds like you're running into cross-domain iframe issues.  I think this question falls outside the scope of this Stack Exchange unless there's something CiviCRM-specific about the issue.  You can search for "iframe some origin policy" to see what's involved in cross-domain iframes.
Comments.UserDisplayName: Jon G - Megaphone Tech
Tags: <forms>
Title: Embedding CiviCRM Event form in an Iframe
ThreadText: # Embedding CiviCRM Event form in an Iframe
  
  (Asked by: username_0 on 2017-02-07)
  
  I used to be able to embed CiviCRM forms in Iframes without issue.
  Recently, I haven't been successful and getting this error:
  
  Refused to display '<http://website.com/civicrm/event/register?id=2>' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.
  
  **Tags:** forms
  
  > **Comments:**
  > **username_1**: Is this an iframe on the same domain or a different one?  
  > **username_0**: Different domain  
  > **username_1**: In that case, it sounds like you're running into cross-domain iframe issues.  I think this question falls outside the scope of this Stack Exchange unless there's something CiviCRM-specific about the issue.  You can search for "iframe some origin policy" to see what's involved in cross-domain iframes.  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_2 on 2017-02-08. Score: 3 | Accepted answer
  
  Drupal core is now protected against clickjacking by default:
  <https://www.drupal.org/node/2735873>
  
  You can install Security Kit module -> and then add specific allow-from domains.
  
  
  ---
  
  