0

I would like to show https://startpage.com in an iframe. When doing so, I get the following error:

Refused to frame 'https://www.startpage.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self'".

Google.com also send same-origin by default, but according to How to show google.com in an iframe?, there are ways to circumvent that.

Is something similar possible for StartPage?

jeanpaul62
  • 7,981
  • 10
  • 47
  • 82
  • Embedding of `startpage.com` is impossible because of 2 HTTP headers it have published: `X-Frame-Options:"SAMEORIGIN"` and `Content-Security-Policy: frame-ancestors 'self';` – granty Nov 01 '21 at 07:44

0 Answers0