Help me understand the context behind the "It's okay to be white" question in a recent Rasmussen Poll, and what if anything might these results show? What are some tools or methods I can purchase to trace a water leak? Since Safari doesn't support Customized built-in elements, I've added an extra script that allow the support. It has gone away in the past while I am diagnosing it. Can you send them to registered emails in THE DEVELOPER FORUM so developers get notified. Can a private person deceive a defendant to obtain evidence? Can a private person deceive a defendant to obtain evidence? Finally, how come when I supply the iframe src a link with parameters I'm getting the X-Frame-Options 'SAMEORIGIN' error? This is frustrating as iframe is the most common use-case and salesforce should allow iframe to third-party sites if the customer has to invoke their own websites in salesforce. 1 Answer Sorted by: 17 X-FRAME-OPTIONS is used to protect against clickjacking attempts. Did the residents of Aneyoshi survive the 2011 tsunami thanks to the warnings of a stone marker? Ackermann Function without Recursion or Stack. Would the reflected sun's radiation melt ice in LEO? Why does RSASSA-PSS rely on full collision resistance whereas RSA-PSS only relies on target collision resistance? Under "User-defined" you'll find AccessControlAllowOrigin (CORS) and CustomHeaders. Dealing with hard questions during a software developer interview. If anyone has a solution, it would be very much appreciated! Why did the Soviets not shoot down US spy satellites during the Cold War? This option prevents the browser from displaying iFrames that are not hosted on the same domain as the parent page. For configuring in IIS write: <httpProtocol> Can patents be featured/explained in a youtube video i.e. An error occurs when loading SharePoint pages inside an iFrame that originate in a different domain. When it happens the INPUT boxes in the CC card payment area are not displayed - there is no place to enter the CC info. Suspicious referee report, are "suggested citations" from a paper mill? Appending &output=embed to the end of the URL fixes the problem. The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a ,