Refused to display 'https://gsap.com/' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

[morganmoskalyk]

I'm attempting to render an iframe in a react app, where the child iframe uses gsap.

I'm getting the following error: chromewebdata/:1 Refused to display 'https://gsap.com/' in a frame because it set 'X-Frame-Options' to 'sameorigin'. chromewebdata/:1 Refused to display 'https://gsap.com/' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

Is it possible to remove this restriction? It would really extend the functionality of the app I'm building to developers

Thanks

See the Pen by '%20in%20a%20frame%20because%20it%20set%20'X-Frame-Options'%20to%20'sameorigin'. (@'%20in%20a%20frame%20because%20it%20set%20'X-Frame-Options'%20to%20'sameorigin'.) on CodePen.

[Cassie]

Hi there. I assume you're talking about embedding the GSAP site? If so - I'm afraid that's been added as a security measure to stop clickjacking

https://www.keycdn.com/blog/x-frame-options