itch.io icon indicating copy to clipboard operation
itch.io copied to clipboard

Cannot embed a jam in iframe due to X-Frame-Options

Open stevenle opened this issue 1 year ago • 2 comments

We're looking to embed a jam in an iframe but because of the X-Frame-Options: SAMEORIGIN http header, the browser blocks the iframe from loading.

Screenshot 2023-10-25 at 11 53 53 AM

Any chance we can request an "embeddable" version of the page with X-Frame-Options removed (and optionally the navbar removed)?

stevenle avatar Oct 25 '23 18:10 stevenle

This is a security measure to prevent click-jacking, among other things.

We will never allow for the actual jam page to be embedded, but we may create a special embed widget for jams. Are there particular things you are looking for in an embed?

Thanks

leafo avatar Oct 25 '23 19:10 leafo

We're mainly looking to embed the content of the page, I think we'd be happy with some "embeddable" version where any form interactions ("join jam", etc.) opens a new tab. Justification for this feature request is that from a marketing perspective, our stakeholders are trying to keep users on our site for navigation purposes, being able to reference API documentation, details about contests/prizes/legal terms etc.

stevenle avatar Oct 25 '23 19:10 stevenle