search

itchio / itch.io

:bug: Public itch.io issues tracker and documentation - use support instead for private information!
https://itch.io/support
240 stars 25 forks source link

Cannot embed a jam in iframe due to X-Frame-Options #1497

Open stevenle opened 11 months ago

stevenle commented 11 months ago

We're looking to embed a jam in an iframe but because of the X-Frame-Options: SAMEORIGIN http header, the browser blocks the iframe from loading.

Screenshot 2023-10-25 at 11 53 53 AM

Any chance we can request an "embeddable" version of the page with X-Frame-Options removed (and optionally the navbar removed)?

leafo commented 11 months ago

This is a security measure to prevent click-jacking, among other things.

We will never allow for the actual jam page to be embedded, but we may create a special embed widget for jams. Are there particular things you are looking for in an embed?

Thanks

stevenle commented 11 months ago

We're mainly looking to embed the content of the page, I think we'd be happy with some "embeddable" version where any form interactions ("join jam", etc.) opens a new tab. Justification for this feature request is that from a marketing perspective, our stakeholders are trying to keep users on our site for navigation purposes, being able to reference API documentation, details about contests/prizes/legal terms etc.