why refused to display in a frame because it set ‘X-Frame-Options\' to \'sameorigin\'?

Ranjana Admin JanBask Expert Latest answer

Answered on May 28, 2024

The X-Frame-Options HTTP header is used to control whether a browser should be allowed to render a page in a , , <embed>, or <object>. This is a security measure to prevent clickjacking attacks, where a malicious site could trick a user into clicking something different from what the user perceives.</p><p><strong>X-Frame-Options Header Values</strong></p><p><ul><li>DENY: The page cannot be displayed in a frame, regardless of the site attempting to do so.<br /> </li><li>SAMEORIGIN: The page can only be displayed in a frame on the same origin as the page itself.<br /> </li><li>ALLOW-FROM uri: The page can only be displayed in a frame on the specified origin (note that this is not widely supported by all browsers).</li></ul></p><p><strong>Error Explanation<br /> </strong></p><p><strong>When you see the error message:</strong></p><pre><code> Refused to display in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'</code></pre><p>It means that the page you are trying to display in an <iframe> has the X-Frame-Options header set to SAMEORIGIN, which only allows the page to be framed by pages from the same origin.<br /> </p><p>For example, if your page is hosted at https://example.com, it can only be embedded in an <iframe> on other pages also hosted at https://example.com. If you try to embed it in a page from a different origin, the browser will block it and show this error.<br /> </p><p><strong>Solutions<br /> </strong></p><p>Ensure Same Origin: Make sure that the page embedding the <iframe> and the page being embedded are from the same origin. For example:<br /> </p><p><ul><li>https://yourdomain.com/page1 can embed https://yourdomain.com/page2.<br /> </li></ul></p><p>Modify X-Frame-Options Header (if you control the server): If you have control over the server hosting the page, you can modify the X-Frame-Options header to ALLOW-FROM with a specific URL (if supported by the target browsers) or DENY if you want to completely disallow embedding.</p><pre><code>X-Frame-Options: ALLOW-FROM https://anotherdomain.com </code></pre><p>However, note that ALLOW-FROM is not supported by all browsers (e.g., Chrome and Safari do not support it).</p><p>Use Content Security Policy (CSP): A more flexible way to control framing is to use the Content Security Policy header with the frame-ancestors directive, which allows you to specify one or more origins that are allowed to frame the content.</p><p>Content-Security-Policy: frame-ancestors 'self' https://anotherdomain.com<br /> </p><p>This method is widely supported and provides more fine-grained control compared to X-Frame-Options.</p><p>Example of Setting CSP Header in Apache:<br /> </p><pre><code></code></pre><p> Header set Content-Security-Policy "frame-ancestors 'self' https://anotherdomain.com"<br /> </p><p></p><p>add_header Content-Security-Policy "frame-ancestors 'self' https://anotherdomain.com";</p><p><strong>Conclusion<br /> </strong></p><p>The X-Frame-Options header is a useful security feature to prevent clickjacking. To resolve the issue of displaying content in an <iframe>, you need to ensure that the embedding page and the embedded content are from the same origin or adjust the server settings to allow framing from specific origins. Using the Content Security Policy header is often a better approach for modern applications due to its flexibility and wider support across browsers.</p></div> <div class="jbt-afoot jbt-votes" data-topic="3763" data-reply="8697"> <span>Was this helpful?</span> <button type="button" class="jbt-vote" data-action="replyup" aria-label="Mark as helpful"> <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M7 10v11H3V10z"/><path d="M7 10l4-8a3 3 0 0 1 3 3v4h5.5a2 2 0 0 1 2 2.3l-1.4 8A2 2 0 0 1 18.1 21H7"/></svg> Helpful <span class="jbt-vote-n">0</span> </button> <button type="button" class="jbt-vote" data-action="replydown" aria-label="Mark as not helpful"> <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M17 14V3h4v11z"/><path d="M17 14l-4 8a3 3 0 0 1-3-3v-4H4.5a2 2 0 0 1-2-2.3l1.4-8A2 2 0 0 1 5.9 3H17"/></svg> <span class="jbt-vote-n">0</span> </button> <span class="jbt-vote-msg" aria-live="polite"></span> </div> </article> <section class="jbt-more" aria-labelledby="jbtMoreHeading"> <div class="jbt-ans-head"><h2 id="jbtMoreHeading">More Salesforce discussions</h2></div> <div class="jbt-more-grid"> <a class="jbt-more-card" href="https://www.janbasktraining.com/community/salesforce/how-to-resolve-error-non-static-method-cannot-be-referenced-from-a-static-context"> <span class="jbt-more-title">How to resolve error non static method cannot be referenced from a static context?</span> <span class="jbt-more-meta">4 answers · 47.9K views</span> </a> <a class="jbt-more-card" href="https://www.janbasktraining.com/community/salesforce/how-to-fix-insufficient-access-rights-on-cross-reference-id"> <span class="jbt-more-title">How to fix insufficient access rights on cross-reference id?</span> <span class="jbt-more-meta">5 answers · 29.6K views</span> </a> <a class="jbt-more-card" href="https://www.janbasktraining.com/community/salesforce/how-do-i-resolve-the-error-connect-etimedout"> <span class="jbt-more-title">How do I resolve the error: connect etimedout</span> <span class="jbt-more-meta">2 answers · 19.0K views</span> </a> <a class="jbt-more-card" href="https://www.janbasktraining.com/community/salesforce/how-to-query-soql-not-like"> <span class="jbt-more-title">How to query Soql not like?</span> <span class="jbt-more-meta">3 answers · 11.9K views</span> </a> <a class="jbt-more-card" href="https://www.janbasktraining.com/community/salesforce/why-sfdx-is-not-recognized-as-an-internal-or-external-command"> <span class="jbt-more-title">Why sfdx is not recognized as an internal or external command?</span> <span class="jbt-more-meta">4 answers · 11.3K views</span> </a> <a class="jbt-more-card" href="https://www.janbasktraining.com/community/salesforce/how-to-use-settimeout-function-in-the-lightning-component"> <span class="jbt-more-title">How to use settimeout function in the lightning component?</span> <span class="jbt-more-meta">2 answers · 9.9K views</span> </a> </div> </section> </div> <aside class="jbt-side" aria-label="Related resources"> <div class="jbt-scard jbt-course"> <div class="jbt-course-top"> <span class="jbt-course-logo"><img src="https://assets.janbasktraining.com/assets2023/img/salesforceIcon.webp" alt="" loading="lazy"></span> <div> <p class="jbt-eyebrow">Learn with experts</p> <h3>Salesforce Training</h3> </div> </div> <p>Live, mentor-led classes with real projects and job assistance.</p> <ul class="jbt-course-facts"> <li><span class="st" aria-hidden="true">★★★★★</span> 4.9/5 · 21.0K+ learners</li> <li>Next batch: October 7</li> <li>Free demo class available</li> </ul> <a class="jbt-btn is-yellow" href="/online-salesforce-training">Book a Free Demo →</a> </div> <a class="jbt-scard jbt-quiz" href="/practice-test/salesforce-quiz"> <span class="jbt-quiz-pill">⚡ 10-question challenge</span> <h3>How well do you know Salesforce?</h3> <p class="jbt-quiz-sub">Take the free Salesforce quiz and get your score instantly.</p> <span class="jbt-quiz-opts" aria-hidden="true"> <span class="jbt-quiz-opt"><b>A</b><i></i></span> <span class="jbt-quiz-opt is-right"><b>B</b><i></i><em>✓</em></span> <span class="jbt-quiz-opt"><b>C</b><i></i></span> </span> <span class="jbt-quiz-chips"><span>10 questions</span><span>~5 min</span><span>100% free</span></span> <span class="jbt-quiz-cta">Start the Salesforce quiz →</span> </a> <div class="jbt-scard jbt-ask"> <h3>Have a different question?</h3> <p>Ask the community and get answers from industry experts — free.</p> <a class="jbt-btn" href="https://www.janbasktraining.com/login">Ask a Question →</a> </div> </aside> </div> </div> </section> <style> /* Learn & Explore section: homepage and category pages. */ .jb-learn { background: #fff; padding: 68px 0 70px; } .jb-learn .jb-discuss-head { text-align: center; max-width: 680px; margin: 0 auto 36px; } .jb-learn .jb-discuss-head h2 { margin: 0 0 10px; font-size: clamp(24px, 2.3vw, 36px); font-weight: 800; line-height: 1.2; color: var(--jt-navy); } .jb-learn .jb-discuss-head p { margin: 0; font-size: clamp(14px, 1vw, 16.5px); color: var(--jt-muted); } .jb-learn-grid { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 24px; align-items: stretch; } .jb-lpanel { display: flex; flex-direction: column; background: #fff; border: 1px solid var(--jt-border); border-radius: 20px; padding: 28px 28px 24px; box-shadow: 0 10px 28px rgba(15,28,63,.06); position: relative; overflow: hidden; } .jb-lpanel::before { content: ""; position: absolute; left: 0; right: 0; top: 0; height: 4px; background: var(--jt-blue); } .jb-lpanel-interview::before { background: var(--jt-yellow); } .jb-lpanel-head { display: flex; align-items: center; gap: 16px; margin-bottom: 14px; } .jb-lpanel-icon { display: inline-flex; align-items: center; justify-content: center; width: 54px; height: 54px; flex: none; border: 1.5px solid #0b0f19; border-radius: 15px; color: #0b0f19; } .jb-lpanel-icon svg { width: 27px; height: 27px; display: block; } .jb-lpanel-head h3 { margin: 0 0 2px; font-size: clamp(18px, 1.5vw, 23px); font-weight: 800; color: var(--jt-navy); line-height: 1.25; } .jb-lpanel-head p { margin: 0; font-size: clamp(13px, 0.9vw, 14.5px); color: var(--jt-muted); } .jb-llist { list-style: none; margin: 0 0 20px; padding: 0; counter-reset: jbl; flex: 1; } .jb-llist li { counter-increment: jbl; border-top: 1px solid var(--jt-border); } .jb-llist a { display: flex; align-items: center; gap: 14px; padding: 14px 4px; color: inherit; } .jb-llist a::before { content: counter(jbl, decimal-leading-zero); flex: none; width: 30px; font-size: 13px; font-weight: 800; color: #9aa6ba; letter-spacing: .02em; transition: color .15s ease; } .jb-llist-text { flex: 1; min-width: 0; } .jb-llist-title { font-size: clamp(14.5px, 1.05vw, 16.5px); font-weight: 700; line-height: 1.4; color: var(--jt-navy); transition: color .15s ease; display: -webkit-box; -webkit-line-clamp: 2; -webkit-box-orient: vertical; overflow: hidden; } .jb-llist-meta { display: flex; align-items: center; flex-wrap: wrap; gap: 8px; margin-top: 5px; font-size: 12.5px; font-weight: 600; color: var(--jt-muted); } .jb-llist-tag { background: var(--jt-bg-soft); color: var(--jt-navy); padding: 2px 10px; border-radius: 50px; font-weight: 700; } .jb-llist-go { flex: none; font-size: 18px; font-weight: 700; color: #0b0f19; opacity: 0; transform: translateX(-6px); transition: opacity .15s ease, transform .15s ease; } .jb-llist a:hover .jb-llist-title, .jb-llist a:focus-visible .jb-llist-title { color: var(--jt-blue); } .jb-llist a:hover::before { color: var(--jt-blue); } .jb-llist a:hover .jb-llist-go, .jb-llist a:focus-visible .jb-llist-go { opacity: 1; transform: none; } .jb-lpanel-cta { display: flex; align-items: center; justify-content: center; gap: 8px; padding: 13px 22px; border-radius: 50px; border: 1.5px solid #0b0f19; color: #0b0f19; font-weight: 800; font-size: 14.5px; transition: background .16s ease, color .16s ease; } .jb-lpanel-cta:hover { background: #0b0f19; color: #fff; } .jb-lpanel-cta:focus-visible, .jb-llist a:focus-visible { outline: 2px solid var(--jt-blue); outline-offset: 2px; } @media (max-width: 900px) { .jb-learn-grid { grid-template-columns: 1fr; } } @media (max-width: 560px) { .jb-learn { padding: 44px 0 46px; } .jb-lpanel { padding: 22px 18px 20px; border-radius: 16px; } .jb-lpanel-icon { width: 46px; height: 46px; } .jb-llist a::before { width: 24px; } } @media (prefers-reduced-motion: reduce) { .jb-llist a::before, .jb-llist-title, .jb-llist-go, .jb-lpanel-cta { transition: none; } } </style> <section class="jb-learn" id="learn-explore" aria-labelledby="jbLearnHeading"> <div class="jb-container"> <div class="jb-discuss-head"> <h2 id="jbLearnHeading">Learn & Explore</h2> <p>Free tutorials and interview questions from industry experts — learn the skill, then get ready to prove it.</p> </div> <div class="jb-learn-grid"> <article class="jb-lpanel jb-lpanel-tutorials"> <div class="jb-lpanel-head"> <span class="jb-lpanel-icon"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.6" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" focusable="false"><path d="M2 4h6a4 4 0 0 1 4 4v13a3 3 0 0 0-3-3H2z"/><path d="M22 4h-6a4 4 0 0 0-4 4v13a3 3 0 0 1 3-3h7z"/></svg></span> <div> <h3>Salesforce Tutorials</h3> <p>Step-by-step Salesforce guides from industry experts</p> </div> </div> <ol class="jb-llist"> <li> <a href="/tutorials/convert-lookup-to-master-detail"> <span class="jb-llist-text"> <span class="jb-llist-title">How To Convert Lookup To Master-Detail?</span> <span class="jb-llist-meta"> <span class="jb-llist-tag">Salesforce</span> <span>7.6K reads</span> </span> </span> <span class="jb-llist-go" aria-hidden="true">→</span> </a> </li> <li> <a href="/tutorials/salesforce-home-page"> <span class="jb-llist-text"> <span class="jb-llist-title">How to Customize Salesforce Classic Home Tab Page Layouts</span> <span class="jb-llist-meta"> <span class="jb-llist-tag">Salesforce</span> <span>4.7K reads</span> </span> </span> <span class="jb-llist-go" aria-hidden="true">→</span> </a> </li> <li> <a href="/tutorials/salesforce-tab"> <span class="jb-llist-text"> <span class="jb-llist-title">What Are The Different Types Of Tabs In Salesforce? What Are Tabs In Salesforce Apps?</span> <span class="jb-llist-meta"> <span class="jb-llist-tag">Salesforce</span> <span>4.4K reads</span> </span> </span> <span class="jb-llist-go" aria-hidden="true">→</span> </a> </li> <li> <a href="/tutorials/salesforce-external-objects"> <span class="jb-llist-text"> <span class="jb-llist-title">What Are External And Big Objects In Salesforce?</span> <span class="jb-llist-meta"> <span class="jb-llist-tag">Salesforce</span> <span>4.2K reads</span> </span> </span> <span class="jb-llist-go" aria-hidden="true">→</span> </a> </li> <li> <a href="/tutorials/salesforce-oops"> <span class="jb-llist-text"> <span class="jb-llist-title">Oops Concept in Salesforce</span> <span class="jb-llist-meta"> <span class="jb-llist-tag">Salesforce</span> <span>4.2K reads</span> </span> </span> <span class="jb-llist-go" aria-hidden="true">→</span> </a> </li> <li> <a href="/tutorials/salesforce-pricing"> <span class="jb-llist-text"> <span class="jb-llist-title">How Is The Pricing Handled In Salesforce?</span> <span class="jb-llist-meta"> <span class="jb-llist-tag">Salesforce</span> <span>3.7K reads</span> </span> </span> <span class="jb-llist-go" aria-hidden="true">→</span> </a> </li> </ol> <a class="jb-lpanel-cta" href="/tutorials/">Browse all tutorials →</a> </article> <article class="jb-lpanel jb-lpanel-interview"> <div class="jb-lpanel-head"> <span class="jb-lpanel-icon"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.6" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" focusable="false"><path d="M7.9 20A9 9 0 1 0 4 16.1L2 22z"/><path d="M9.1 9a3 3 0 0 1 5.8 1c0 2-3 3-3 3"/><path d="M12 17h.01"/></svg></span> <div> <h3>Salesforce Interview Q&A</h3> <p>Common Salesforce interview questions, answered</p> </div> </div> <ol class="jb-llist"> <li> <a href="/interview-questions/salesforce-apex-questions-and-answers"> <span class="jb-llist-text"> <span class="jb-llist-title">Must-Know Salesforce Apex Interview Questions and Answers</span> <span class="jb-llist-meta"> <span class="jb-llist-tag">Salesforce</span> <span>5.7K views</span> </span> </span> <span class="jb-llist-go" aria-hidden="true">→</span> </a> </li> <li> <a href="/interview-questions/top-salesforce-questions-and-answers"> <span class="jb-llist-text"> <span class="jb-llist-title">Top Salesforce Interview Questions and Answers</span> <span class="jb-llist-meta"> <span class="jb-llist-tag">Salesforce</span> <span>4.0K views</span> </span> </span> <span class="jb-llist-go" aria-hidden="true">→</span> </a> </li> <li> <a href="/interview-questions/jws-and-jwt"> <span class="jb-llist-text"> <span class="jb-llist-title">Top JWS and JWT Interview Questions and Answers</span> <span class="jb-llist-meta"> <span class="jb-llist-tag">Salesforce</span> <span>3.6K views</span> </span> </span> <span class="jb-llist-go" aria-hidden="true">→</span> </a> </li> <li> <a href="/interview-questions/list-views-filters"> <span class="jb-llist-text"> <span class="jb-llist-title">Interview Questions Based On List Views & Its Filters</span> <span class="jb-llist-meta"> <span class="jb-llist-tag">Salesforce</span> <span>3.1K views</span> </span> </span> <span class="jb-llist-go" aria-hidden="true">→</span> </a> </li> <li> <a href="/interview-questions/apex-auth-namespace"> <span class="jb-llist-text"> <span class="jb-llist-title">Understanding Apex Auth Namespace: Top Interview Questions & Answers</span> <span class="jb-llist-meta"> <span class="jb-llist-tag">Salesforce</span> <span>3.0K views</span> </span> </span> <span class="jb-llist-go" aria-hidden="true">→</span> </a> </li> <li> <a href="/interview-questions/salesforce-admin-questions-and-answers"> <span class="jb-llist-text"> <span class="jb-llist-title">Top 141 Salesforce Administrator Interview Questions & Answers</span> <span class="jb-llist-meta"> <span class="jb-llist-tag">Salesforce</span> <span>3.0K views</span> </span> </span> <span class="jb-llist-go" aria-hidden="true">→</span> </a> </li> </ol> <a class="jb-lpanel-cta" href="/interview-questions/">Browse all interview Q&A →</a> </article> </div> </div> </section> <style> .jb-blogs { background: var(--jt-bg-soft); padding: 64px 0 66px; } .jb-blogs.is-white { background: #fff; } .jb-blogs-head { text-align: center; max-width: 680px; margin: 0 auto 34px; } .jb-blogs-head h2 { margin: 0 0 10px; font-size: clamp(24px, 2.3vw, 36px); font-weight: 800; line-height: 1.2; color: var(--jt-navy); } .jb-blogs-head p { margin: 0; font-size: clamp(14px, 1vw, 16.5px); color: var(--jt-muted); } .jb-blogs-grid { display: grid; grid-template-columns: repeat(4, minmax(0, 1fr)); gap: 20px; } .jb-bcard { display: flex; flex-direction: column; background: #fff; border: 1px solid var(--jt-border); border-radius: 18px; overflow: hidden; color: inherit; box-shadow: 0 8px 22px rgba(15,28,63,.06); transition: transform .18s ease, box-shadow .18s ease, border-color .18s ease; } .jb-bcard:hover { transform: translateY(-4px); box-shadow: 0 18px 36px rgba(15,28,63,.12); border-color: rgba(19,106,171,.35); } .jb-bcard:focus-visible { outline: 2px solid var(--jt-blue); outline-offset: 2px; } .jb-bcard-img { display: block; aspect-ratio: 16 / 9; background: linear-gradient(135deg, #e6eef8, #efe9fa); overflow: hidden; } .jb-bcard-img img { width: 100%; height: 100%; object-fit: cover; display: block; transition: transform .35s ease; } .jb-bcard:hover .jb-bcard-img img { transform: scale(1.04); } .jb-bcard-body { display: flex; flex-direction: column; gap: 9px; padding: 16px 18px 18px; flex: 1; } .jb-bcard-tag { margin: 0; font-size: 12px; font-weight: 800; letter-spacing: .05em; text-transform: uppercase; color: var(--jt-blue); } .jb-bcard-title { margin: 0; font-size: clamp(15px, 1.05vw, 17px); font-weight: 800; line-height: 1.35; color: var(--jt-navy); display: -webkit-box; -webkit-line-clamp: 3; -webkit-box-orient: vertical; overflow: hidden; } .jb-bcard:hover .jb-bcard-title { color: var(--jt-blue); } .jb-bcard-excerpt { margin: 0; font-size: 13.5px; line-height: 1.6; color: var(--jt-muted); display: -webkit-box; -webkit-line-clamp: 2; -webkit-box-orient: vertical; overflow: hidden; } .jb-bcard-meta { margin: auto 0 0; padding-top: 12px; border-top: 1px solid var(--jt-border); display: flex; align-items: center; flex-wrap: wrap; gap: 4px 10px; font-size: 12.5px; font-weight: 600; color: var(--jt-muted); } .jb-bcard-meta .jb-bcard-go { margin-left: auto; font-weight: 800; color: #0b0f19; } .jb-blogs-cta { text-align: center; margin-top: 34px; } .jb-blogs-cta a { display: inline-flex; align-items: center; gap: 8px; padding: 13px 30px; border-radius: 50px; border: 1.5px solid #0b0f19; color: #0b0f19; font-weight: 800; font-size: 14.5px; transition: background .16s ease, color .16s ease; } .jb-blogs-cta a:hover { background: #0b0f19; color: #fff; } @media (max-width: 1100px) { .jb-blogs-grid { grid-template-columns: repeat(2, minmax(0, 1fr)); } } @media (max-width: 640px) { .jb-blogs { padding: 44px 0 46px; } .jb-blogs-grid { grid-template-columns: 1fr; gap: 16px; } } @media (prefers-reduced-motion: reduce) { .jb-bcard, .jb-bcard-img img, .jb-blogs-cta a { transition: none; } .jb-bcard:hover, .jb-bcard:hover .jb-bcard-img img { transform: none; } } </style> <section class="jb-blogs" id="from-the-blog" aria-labelledby="jbBlogsHeading"> <div class="jb-container"> <div class="jb-blogs-head"> <h2 id="jbBlogsHeading">Latest Salesforce Blogs</h2> <p>Guides, tips and career advice on Salesforce from JanBask experts.</p> </div> <div class="jb-blogs-grid"> <a class="jb-bcard" href="https://www.janbasktraining.com/blog/how-to-become-salesforce-developer-without-experience"> <span class="jb-bcard-img"> <img src="https://assets.janbasktraining.com/blog/uploads/images/1_Banner_desktop_SF_Dev_No_Experience_3.jpg" alt="" loading="lazy" onerror="if(!this.dataset.f){this.dataset.f=1;this.src='https://www.janbasktraining.com/blog/uploads/images/1_Banner_desktop_SF_Dev_No_Experience_3.jpg';}else{this.remove();}"> </span> <span class="jb-bcard-body"> <span class="jb-bcard-tag">Salesforce</span> <span class="jb-bcard-title">How to Become a Salesforce Developer Without Experience</span> <span class="jb-bcard-excerpt">No coding background? Learn how to become a Salesforce Developer step by step - skills to build, projects to create, and how to…</span> <span class="jb-bcard-meta"> <span>Oct 2, 2026</span> <span>· 40 reads</span> <span class="jb-bcard-go">Read more →</span> </span> </span> </a> <a class="jb-bcard" href="https://www.janbasktraining.com/blog/how-to-become-salesforce-admin-with-no-experience"> <span class="jb-bcard-img"> <img src="https://assets.janbasktraining.com/blog/uploads/images/1_Banner_desktop_SF_Admin_No_Experience_3.jpg" alt="" loading="lazy" onerror="if(!this.dataset.f){this.dataset.f=1;this.src='https://www.janbasktraining.com/blog/uploads/images/1_Banner_desktop_SF_Admin_No_Experience_3.jpg';}else{this.remove();}"> </span> <span class="jb-bcard-body"> <span class="jb-bcard-tag">Salesforce</span> <span class="jb-bcard-title">How to Become a Salesforce Admin With No Experience</span> <span class="jb-bcard-excerpt">No Salesforce Admin experience? Learn how to build real skills, create projects, and land an entry-level Salesforce Admin job…</span> <span class="jb-bcard-meta"> <span>Oct 2, 2026</span> <span>· 42 reads</span> <span class="jb-bcard-go">Read more →</span> </span> </span> </a> <a class="jb-bcard" href="https://www.janbasktraining.com/blog/how-long-to-learn-salesforce-developer"> <span class="jb-bcard-img"> <img src="https://assets.janbasktraining.com/blog/uploads/images/1_Banner_desktop_How_Long_Does_It_Take_to_Learn_Salesforce_Admin__8.jpg" alt="" loading="lazy" onerror="if(!this.dataset.f){this.dataset.f=1;this.src='https://www.janbasktraining.com/blog/uploads/images/1_Banner_desktop_How_Long_Does_It_Take_to_Learn_Salesforce_Admin__8.jpg';}else{this.remove();}"> </span> <span class="jb-bcard-body"> <span class="jb-bcard-tag">Salesforce</span> <span class="jb-bcard-title">How Long Does It Take to Become a Salesforce Developer?</span> <span class="jb-bcard-excerpt">Wondering how long to learn Salesforce Developer? Most beginners need 6–12 months. See the study time, stage-by-stage roadmap and…</span> <span class="jb-bcard-meta"> <span>Sep 25, 2026</span> <span>· 51 reads</span> <span class="jb-bcard-go">Read more →</span> </span> </span> </a> <a class="jb-bcard" href="https://www.janbasktraining.com/blog/how-long-to-learn-salesforce-admin"> <span class="jb-bcard-img"> <img src="https://assets.janbasktraining.com/blog/uploads/images/1_Banner_desktop_How_Long_Does_It_Take_to_Learn_Salesforce_Admin__3.jpg" alt="" loading="lazy" onerror="if(!this.dataset.f){this.dataset.f=1;this.src='https://www.janbasktraining.com/blog/uploads/images/1_Banner_desktop_How_Long_Does_It_Take_to_Learn_Salesforce_Admin__3.jpg';}else{this.remove();}"> </span> <span class="jb-bcard-body"> <span class="jb-bcard-tag">Salesforce</span> <span class="jb-bcard-title">How Long Does It Take to Become a Salesforce Admin?</span> <span class="jb-bcard-excerpt">Wondering how long to learn Salesforce Admin? Most beginners need 3–6 months. See the study time, stage-by-stage roadmap and…</span> <span class="jb-bcard-meta"> <span>Sep 25, 2026</span> <span>· 52 reads</span> <span class="jb-bcard-go">Read more →</span> </span> </span> </a> </div> <div class="jb-blogs-cta"> <a href="https://www.janbasktraining.com/blog/category/salesforce">View all Salesforce blogs →</a> </div> </div> </section> <script type="application/ld+json">{"@context":"https://schema.org","@type":"QAPage","name":"why refused to display in a frame because it set ‘X-Frame-Options' to 'sameorigin'?","url":"https://www.janbasktraining.com/community/salesforce/why-refused-to-display-in-a-frame-because-it-set-x-frame-options-to-sameorigin","mainEntity":{"@type":"Question","name":"why refused to display in a frame because it set ‘X-Frame-Options' to 'sameorigin'?","text":"My requirement is to show a standard VF page into a Custom Visualforce page. I am using apex:iframe with 'src' parameter and the value as relative url to the standard VF page. However it does not give any error at compile time but at the runtime it only shows a blank page. Then I opened the developer console on the browser, it shows an error. That says \"Refused to display 'https://ap2.salesforce.com/001' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'\".This is my iframe.","answerCount":2,"dateCreated":"2021-04-22T00:00:00-04:00","datePublished":"2021-04-22T00:00:00-04:00","author":{"@type":"Person","name":"Anisha Dalal","url":"https://www.janbasktraining.com/community/user_topics/10277"},"about":"Salesforce","inLanguage":"en","acceptedAnswer":{"@type":"Answer","text":"You cannot display a part of websites inside an iFrame. Reason being that they send an \"X-Frame-Options: SAMEORIGIN\" response header. This option prevents the browser from displaying iFrames that are not hosted on the same domain as the parent page. This is a security feature to prevent click-jacking. \"Enable clickjack protection for customer Visualforce pages with headers disabled\" in Setup \u003E Security Controls \u003E Session Settings Hope this will help!","dateCreated":"2021-04-22T04:00:00-04:00","url":"https://www.janbasktraining.com/community/salesforce/why-refused-to-display-in-a-frame-because-it-set-x-frame-options-to-sameorigin#answer-3968","author":{"@type":"Person","name":"Anisha Dalal","url":"https://www.janbasktraining.com/community/user_topics/10277"},"upvoteCount":0},"suggestedAnswer":[{"@type":"Answer","text":"The X-Frame-Options HTTP header is used to control whether a browser should be allowed to render a page in a , , , or . This is a security measure to prevent clickjacking attacks, where a malicious site could trick a user into clicking something different from what the user perceives.X-Frame-Options Header ValuesDENY: The page cannot be displayed in a frame, regardless of the site attempting to do so. SAMEORIGIN: The page can only be displayed in a frame on the same origin as the page itself. ALLOW-FROM uri: The page can only be displayed in a frame on the specified origin (note that this is not widely supported by all browsers).Error Explanation When you see the error message: Refused to display in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'It means that the page you are trying to display in an has the X-Frame-Options header set to SAMEORIGIN, which only allows the page to be framed by pages from the same origin. For example, if your page is hosted at https://example.com, it can only be embedded in an on other pages also hosted at https://example.com. If you try to embed it in a page from a different origin, the browser will block it and show this error. Solutions Ensure Same Origin: Make sure that the page embedding the and the page being embedded are from the same origin. For example: https://yourdomain.com/page1 can embed https://yourdomain.com/page2. Modify X-Frame-Options Header (if you control the server): If you have control over the server hosting the page, you can modify the X-Frame-Options header to ALLOW-FROM with a specific URL (if supported by the target browsers) or DENY if you want to completely disallow embedding.X-Frame-Options: ALLOW-FROM https://anotherdomain.com However, note that ALLOW-FROM is not supported by all browsers (e.g., Chrome and Safari do not support it).Use Content Security Policy (CSP): A more flexible way to control framing is to use the Content Security Policy header with the frame-ancestors directive, which allows you to specify one or more origins that are allowed to frame the content.Content-Security-Policy: frame-ancestors 'self' https://anotherdomain.com This method is widely supported and provides more fine-grained control compared to X-Frame-Options.Example of Setting CSP Header in Apache: Header set Content-Security-Policy \"frame-ancestors 'self' https://anotherdomain.com\" add_header Content-Security-Policy \"frame-ancestors 'self' https://anotherdomain.com\";Conclusion The X-Frame-Options header is a useful security feature to prevent clickjacking. To resolve the issue of displaying content in an , you need to ensure that the embedding page and the embedded content are from the same origin or adjust the server settings to allow framing from specific origins. Using the Content Security Policy header is often a better approach for modern applications due to its flexibility and wider support across browsers.","dateCreated":"2024-05-28T05:26:34-04:00","url":"https://www.janbasktraining.com/community/salesforce/why-refused-to-display-in-a-frame-because-it-set-x-frame-options-to-sameorigin#answer-8697","author":{"@type":"Person","name":"Ranjana Admin","url":"https://www.janbasktraining.com/community/user_topics/2892"},"upvoteCount":0}]}}</script> <script type="application/ld+json">{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Community","item":"https://www.janbasktraining.com/community/"},{"@type":"ListItem","position":2,"name":"Salesforce","item":"https://www.janbasktraining.com/community/salesforce"},{"@type":"ListItem","position":3,"name":"why refused to display in a frame because it set ‘X-Frame-Options' to 'sameorigin'?","item":"https://www.janbasktraining.com/community/salesforce/why-refused-to-display-in-a-frame-because-it-set-x-frame-options-to-sameorigin"}]}</script> <script> (function () { var loggedIn = false; var loginUrl = "https:\/\/www.janbasktraining.com\/login"; var voteUrl = "https:\/\/www.janbasktraining.com\/community\/ajax_calls\/replyvotes"; // Code blocks: editor-style frame with a language label and copy button, then // syntax colouring from highlight.js (loaded only when a page actually has code; // without it the blocks simply stay dark and monospaced). (function () { var pres = document.querySelectorAll('.jbt-prose pre'); if (!pres.length) return; var defaultLang = "java"; var NAMES = { python: 'Python', java: 'Java', sql: 'SQL', bash: 'Terminal', shell: 'Terminal', javascript: 'JavaScript', json: 'JSON', xml: 'HTML / XML', html: 'HTML', css: 'CSS', php: 'PHP', csharp: 'C#', cpp: 'C++', yaml: 'YAML', plaintext: 'Code' }; var ALLOWED = ['python', 'java', 'javascript', 'sql', 'bash', 'json', 'xml', 'css', 'php', 'csharp', 'cpp', 'yaml']; var copyIcon = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="9" y="9" width="13" height="13" rx="2"/><path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"/></svg>'; var blocks = []; Array.prototype.forEach.call(pres, function (pre) { if (pre.parentNode.classList.contains('jbt-code')) return; var old = pre.querySelector('code'); var m = ((old && old.className) || pre.className || '').match(/(?:language|lang)-([a-z0-9#+]+)/i); // <br> is a line break inside <pre>, unless a real newline already follows it var clone = pre.cloneNode(true); Array.prototype.forEach.call(clone.querySelectorAll('br'), function (br) { var next = br.nextSibling; if (next && next.nodeType === 3 && /^\r?\n/.test(next.nodeValue)) { br.parentNode.removeChild(br); } else { br.parentNode.replaceChild(document.createTextNode('\n'), br); } }); var text = clone.textContent.replace(/^\s*\n/, '').replace(/\s+$/, ''); if (!text.trim()) return; var code = document.createElement('code'); code.textContent = text; pre.textContent = ''; pre.removeAttribute('class'); pre.appendChild(code); var wrap = document.createElement('div'); wrap.className = 'jbt-code'; var bar = document.createElement('div'); bar.className = 'jbt-code-bar'; bar.innerHTML = '<span class="jbt-code-dots" aria-hidden="true"><i></i><i></i><i></i></span><span class="jbt-code-lang"></span><button type="button" class="jbt-code-copy" aria-label="Copy code">' + copyIcon + '<span>Copy</span></button>'; pre.parentNode.insertBefore(wrap, pre); wrap.appendChild(bar); wrap.appendChild(pre); var hint = m ? m[1].toLowerCase() : defaultLang; var label = bar.querySelector('.jbt-code-lang'); label.textContent = NAMES[hint] || 'Code'; blocks.push({ code: code, label: label, hint: hint, text: text }); var btn = bar.querySelector('.jbt-code-copy'); btn.addEventListener('click', function () { var done = function () { btn.classList.add('is-copied'); btn.querySelector('span').textContent = 'Copied'; setTimeout(function () { btn.classList.remove('is-copied'); btn.querySelector('span').textContent = 'Copy'; }, 1800); }; if (navigator.clipboard && navigator.clipboard.writeText) { navigator.clipboard.writeText(text).then(done, function () { window.prompt('Copy this code', text); }); } else { var ta = document.createElement('textarea'); ta.value = text; ta.style.position = 'fixed'; ta.style.opacity = '0'; document.body.appendChild(ta); ta.select(); try { document.execCommand('copy'); done(); } catch (e) { window.prompt('Copy this code', text); } document.body.removeChild(ta); } }); }); if (!blocks.length) return; var css = document.createElement('link'); css.rel = 'stylesheet'; css.href = 'https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.9.0/styles/github-dark.min.css'; document.head.appendChild(css); var js = document.createElement('script'); js.src = 'https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.9.0/highlight.min.js'; js.onload = function () { if (!window.hljs) return; blocks.forEach(function (b) { try { var res; if (b.hint && ALLOWED.indexOf(b.hint) !== -1 && window.hljs.getLanguage(b.hint)) { res = window.hljs.highlight(b.text, { language: b.hint, ignoreIllegals: true }); } else { var subset = defaultLang ? [defaultLang].concat(ALLOWED.filter(function (l) { return l !== defaultLang; })) : ALLOWED; res = window.hljs.highlightAuto(b.text, subset); if (!res.language || res.relevance < 4) return; } b.code.innerHTML = res.value; b.code.className = 'hljs language-' + (res.language || b.hint); if (res.language && NAMES[res.language]) b.label.textContent = NAMES[res.language]; } catch (e) { /* leave the block plain */ } }); }; document.head.appendChild(js); })(); // Helpful / not helpful. ajax_calls/replyvotes needs a logged-in community session. Array.prototype.forEach.call(document.querySelectorAll('.jbt-votes'), function (box) { var msg = box.querySelector('.jbt-vote-msg'); Array.prototype.forEach.call(box.querySelectorAll('.jbt-vote'), function (btn) { btn.addEventListener('click', function () { if (!loggedIn) { window.location.href = loginUrl; return; } var action = btn.getAttribute('data-action'); var buttons = box.querySelectorAll('.jbt-vote'); Array.prototype.forEach.call(buttons, function (b) { b.disabled = true; }); var body = 'postid=' + encodeURIComponent(box.getAttribute('data-topic')) + '&replyid=' + encodeURIComponent(box.getAttribute('data-reply')) + '&action=' + encodeURIComponent(action); fetch(voteUrl, { method: 'POST', credentials: 'same-origin', headers: { 'Content-Type': 'application/x-www-form-urlencoded', 'X-Requested-With': 'XMLHttpRequest' }, body: body }).then(function (r) { if (!r.ok) throw new Error('vote failed'); var n = btn.querySelector('.jbt-vote-n'); if (n) n.textContent = (parseInt(n.textContent, 10) || 0) + 1; btn.classList.add('is-done'); if (msg) msg.textContent = 'Thanks for your feedback'; }).catch(function () { Array.prototype.forEach.call(buttons, function (b) { b.disabled = false; }); if (msg) msg.textContent = 'Couldn’t save your vote. Try again.'; }); }); }); }); })(); </script> <style> .jb-lead { position: fixed; inset: 0; z-index: 2147483000; display: none; align-items: center; justify-content: center; padding: 20px; background: rgba(11,15,25,.62); } .jb-lead.is-open { display: flex; animation: jbLeadFade .22s ease both; } @keyframes jbLeadFade { from { opacity: 0; } to { opacity: 1; } } .jb-lead-box { position: relative; width: 100%; max-width: 860px; max-height: calc(100vh - 40px); overflow: auto; display: grid; grid-template-columns: 0.9fr 1.1fr; background: #fff; border-radius: 22px; box-shadow: 0 30px 80px rgba(0,0,0,.4); animation: jbLeadRise .28s ease both; } @keyframes jbLeadRise { from { transform: translateY(18px) scale(.98); opacity: 0; } to { transform: none; opacity: 1; } } .jb-lead-side { position: relative; overflow: hidden; padding: 38px 32px; color: #fff; display: flex; flex-direction: column; justify-content: center; gap: 16px; background: linear-gradient(150deg, #0F1C3F 0%, #14407a 58%, #5a3f96 100%); } .jb-lead-side::after { content: ""; position: absolute; right: -60px; bottom: -70px; width: 220px; height: 220px; border-radius: 50%; background: radial-gradient(circle, rgba(248,189,0,.3), transparent 70%); } .jb-lead-side > * { position: relative; z-index: 1; } .jb-lead-eyebrow { align-self: flex-start; padding: 4px 13px; border-radius: 50px; background: #F8BD00; color: #0b0f19; font-size: 11.5px; font-weight: 800; letter-spacing: .04em; text-transform: uppercase; } .jb-lead-side h2 { margin: 0; font-size: clamp(24px, 2.4vw, 31px); font-weight: 800; line-height: 1.2; color: #fff; } .jb-lead-side ul { list-style: none; margin: 0; padding: 0; display: grid; gap: 10px; font-size: 14.5px; font-weight: 600; color: rgba(255,255,255,.9); } .jb-lead-side li { display: flex; gap: 10px; align-items: flex-start; } .jb-lead-side li::before { content: "\2713"; flex: none; width: 20px; height: 20px; margin-top: 1px; border-radius: 50%; background: rgba(74,222,128,.25); color: #4ade80; display: inline-flex; align-items: center; justify-content: center; font-size: 12px; font-weight: 800; } .jb-lead-main { padding: 38px 34px 30px; display: flex; flex-direction: column; justify-content: center; } .jb-lead-main h3 { margin: 0 0 6px; font-size: 21px; font-weight: 800; color: #0F1C3F; } .jb-lead-main > p { margin: 0 0 18px; font-size: 14px; line-height: 1.55; color: #4B5768; } .jb-lead-field { display: block; margin-bottom: 12px; } .jb-lead-field span { display: block; margin-bottom: 5px; font-size: 12.5px; font-weight: 700; color: #1F2937; } .jb-lead-field input { width: 100%; box-sizing: border-box; padding: 12px 14px; border: 1px solid #c9d1de; border-radius: 12px; font: inherit; font-size: 15px; color: #1F2937; background: #fff; outline: none; } .jb-lead-field input:focus { border-color: #136AAB; box-shadow: 0 0 0 3px rgba(19,106,171,.15); } .jb-lead-hp { position: absolute; left: -9999px; width: 1px; height: 1px; overflow: hidden; } .jb-lead-btn { width: 100%; margin-top: 4px; padding: 14px 20px; border: 0; border-radius: 50px; cursor: pointer; font: inherit; font-size: 15.5px; font-weight: 800; color: #fff; background: #D52B1E; box-shadow: 0 10px 22px rgba(213,43,30,.28); transition: transform .15s ease, background .15s ease; } .jb-lead-btn:hover { transform: translateY(-2px); } .jb-lead-btn:disabled { opacity: .7; cursor: progress; transform: none; } .jb-lead-note { margin: 12px 0 0; font-size: 12px; color: #6b7686; text-align: center; } .jb-lead-msg { min-height: 18px; margin: 4px 0 0; font-size: 13px; font-weight: 700; color: #D52B1E; } .jb-lead-close { position: absolute; top: 12px; right: 12px; z-index: 3; width: 36px; height: 36px; border-radius: 50%; border: 0; cursor: pointer; font-size: 20px; line-height: 1; background: rgba(15,28,63,.08); color: #0F1C3F; } .jb-lead-close:hover { background: rgba(15,28,63,.16); } .jb-lead-done { display: none; text-align: center; padding: 40px 34px; grid-column: 1 / -1; } .jb-lead-done .jb-lead-tick { width: 64px; height: 64px; margin: 0 auto 16px; border-radius: 50%; background: #e8f6ee; color: #14663a; display: flex; align-items: center; justify-content: center; font-size: 30px; font-weight: 800; } .jb-lead-done h3 { margin: 0 0 8px; font-size: 24px; font-weight: 800; color: #0F1C3F; } .jb-lead-done p { margin: 0 0 20px; color: #4B5768; font-size: 15px; } .jb-lead-done button { padding: 12px 28px; border: 1.5px solid #0b0f19; border-radius: 50px; background: #fff; color: #0b0f19; font: inherit; font-weight: 800; cursor: pointer; } .jb-lead-box.is-done .jb-lead-side, .jb-lead-box.is-done .jb-lead-main { display: none; } .jb-lead-box.is-done .jb-lead-done { display: block; } @media (max-width: 720px) { .jb-lead { align-items: flex-end; padding: 0; } .jb-lead-box { grid-template-columns: 1fr; max-width: none; border-radius: 22px 22px 0 0; max-height: 92vh; } .jb-lead-side { padding: 26px 24px 20px; gap: 10px; } .jb-lead-side ul { display: none; } .jb-lead-main { padding: 22px 24px 26px; } } @media (prefers-reduced-motion: reduce) { .jb-lead.is-open, .jb-lead-box { animation: none; } .jb-lead-btn { transition: none; } } </style> <div class="jb-lead" id="jbLead" role="dialog" aria-modal="true" aria-labelledby="jbLeadTitle" aria-hidden="true"> <div class="jb-lead-box" id="jbLeadBox"> <button type="button" class="jb-lead-close" id="jbLeadClose" aria-label="Close">×</button> <div class="jb-lead-side"> <span class="jb-lead-eyebrow">Before you go</span> <h2 id="jbLeadTitle">Want answers to more Salesforce questions?</h2> <ul> <li>New Salesforce answers from industry experts</li> <li>Interview questions to help you get hired</li> <li>Invites to free live demo classes</li> </ul> </div> <div class="jb-lead-main"> <h3>Stay in the loop — it’s free</h3> <p>Leave your details and our experts will send you the best new Salesforce answers and learning resources.</p> <form id="jbLeadForm" novalidate autocomplete="on"> <label class="jb-lead-field"><span>Full name</span><input type="text" name="name" autocomplete="name" placeholder="Your name" maxlength="80" required></label> <label class="jb-lead-field"><span>Email address</span><input type="email" name="email" autocomplete="email" placeholder="you@example.com" maxlength="120" required></label> <label class="jb-lead-field"><span>Phone number</span><input type="tel" name="phone" autocomplete="tel" inputmode="tel" placeholder="With country code, e.g. +1 202 555 0143" maxlength="20" required></label> <div class="jb-lead-hp" aria-hidden="true"><label>Website <input type="text" name="website" tabindex="-1" autocomplete="off"></label></div> <input type="hidden" name="category" value="Salesforce"> <input type="hidden" name="course" value="Salesforce"> <input type="hidden" name="page_url" value=""> <input type="hidden" name="t" value="1791115623"> <p class="jb-lead-msg" id="jbLeadMsg" role="alert"></p> <button type="submit" class="jb-lead-btn" id="jbLeadBtn">Send me updates →</button> <p class="jb-lead-note">We’ll only use this to share learning resources. No spam, ever.</p> </form> </div> <div class="jb-lead-done" id="jbLeadDone"> <div class="jb-lead-tick" aria-hidden="true">✓</div> <h3>You’re on the list!</h3> <p id="jbLeadDoneText">Thanks — we’ll be in touch shortly.</p> <button type="button" id="jbLeadDoneBtn">Keep reading</button> </div> </div> </div> <script> (function () { var root = document.getElementById('jbLead'); if (!root) return; var KEY_DONE = 'jb_lead_done', KEY_SEEN = 'jb_lead_seen', WEEK = 7 * 24 * 3600 * 1000; var store = function (fn) { try { return fn(); } catch (e) { return null; } }; if (store(function () { return localStorage.getItem(KEY_DONE); })) return; var seen = parseInt(store(function () { return localStorage.getItem(KEY_SEEN); }) || '0', 10); if (seen && Date.now() - seen < WEEK) return; if (store(function () { return sessionStorage.getItem(KEY_SEEN); })) return; var box = document.getElementById('jbLeadBox'), form = document.getElementById('jbLeadForm'); var msg = document.getElementById('jbLeadMsg'), btn = document.getElementById('jbLeadBtn'); var opened = false, lastFocus = null, born = Date.now(); function open() { if (opened) return; opened = true; lastFocus = document.activeElement; store(function () { sessionStorage.setItem(KEY_SEEN, '1'); }); root.classList.add('is-open'); root.setAttribute('aria-hidden', 'false'); document.documentElement.style.overflow = 'hidden'; form.querySelector('[name="page_url"]').value = window.location.href; setTimeout(function () { var f = form.querySelector('[name="name"]'); if (f) f.focus(); }, 60); } function close() { root.classList.remove('is-open'); root.setAttribute('aria-hidden', 'true'); document.documentElement.style.overflow = ''; store(function () { localStorage.setItem(KEY_SEEN, String(Date.now())); }); if (lastFocus && lastFocus.focus) lastFocus.focus(); } document.getElementById('jbLeadClose').addEventListener('click', close); document.getElementById('jbLeadDoneBtn').addEventListener('click', close); root.addEventListener('mousedown', function (e) { if (e.target === root) close(); }); document.addEventListener('keydown', function (e) { if (!opened || !root.classList.contains('is-open')) return; if (e.key === 'Escape') { close(); return; } if (e.key === 'Tab') { // keep focus inside the dialog var f = box.querySelectorAll('a[href], button:not([disabled]), input:not([tabindex="-1"])'); if (!f.length) return; var first = f[0], last = f[f.length - 1]; if (e.shiftKey && document.activeElement === first) { e.preventDefault(); last.focus(); } else if (!e.shiftKey && document.activeElement === last) { e.preventDefault(); first.focus(); } } }); // desktop: the pointer leaves through the top edge (towards tabs / address bar / close button) document.addEventListener('mouseout', function (e) { if (!e.relatedTarget && e.clientY <= 0 && Date.now() - born > 12000) open(); }); // touch screens: read most of the page, then scroll back up var maxY = 0, lastY = window.pageYOffset; window.addEventListener('scroll', function () { var y = window.pageYOffset, h = document.documentElement.scrollHeight - window.innerHeight; if (y > maxY) maxY = y; if (h > 0 && maxY / h > 0.5 && maxY - y > 320 && y < lastY && Date.now() - born > 20000 && 'ontouchstart' in window) open(); lastY = y; }, { passive: true }); form.addEventListener('submit', function (e) { e.preventDefault(); msg.textContent = ''; var name = form.name.value.trim(), email = form.email.value.trim(), digits = form.phone.value.replace(/\D+/g, ''); if (name.length < 2) { msg.textContent = 'Please enter your name.'; form.name.focus(); return; } if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) { msg.textContent = 'Please enter a valid email address.'; form.email.focus(); return; } if (digits.length < 7 || digits.length > 15) { msg.textContent = 'Please enter a valid phone number.'; form.phone.focus(); return; } btn.disabled = true; var label = btn.innerHTML; btn.textContent = 'Sending\u2026'; var body = new URLSearchParams(new FormData(form)).toString(); fetch('/community/ajax_calls/lead', { method: 'POST', credentials: 'same-origin', headers: { 'Content-Type': 'application/x-www-form-urlencoded', 'X-Requested-With': 'XMLHttpRequest' }, body: body }).then(function (r) { return r.json().catch(function () { return { status: 0 }; }); }) .then(function (res) { if (res && res.status == 1) { store(function () { localStorage.setItem(KEY_DONE, '1'); }); document.getElementById('jbLeadDoneText').textContent = 'Thanks, ' + name.split(' ')[0] + '. We\u2019ll be in touch shortly with more Salesforce updates.'; box.classList.add('is-done'); if (window.dataLayer) window.dataLayer.push({ event: 'community_lead_submit' }); } else { msg.textContent = (res && res.msg) || 'Something went wrong. Please try again.'; btn.disabled = false; btn.innerHTML = label; } }).catch(function () { msg.textContent = 'Something went wrong. Please try again.'; btn.disabled = false; btn.innerHTML = label; }); }); })(); </script> <style> .jb-footer { background: #0e1013; color: rgba(255,255,255,.75); padding: 48px 0 0; margin-top: 48px; font-family: "Inter", Arial, sans-serif; } .jb-footer-grid { display: grid; grid-template-columns: 1.3fr 1fr 1fr 1fr; gap: 32px; padding-bottom: 36px; border-bottom: 1px solid rgba(255,255,255,.12); } .jb-footer-logo img { height: 30px; margin-bottom: 16px; } .jb-footer-contact { display: flex; align-items: center; gap: 8px; margin-bottom: 10px; font-size: 13.5px; color: rgba(255,255,255,.75); } .jb-footer-contact svg { width: 15px; height: 15px; flex-shrink: 0; } .jb-footer-social { display: flex; gap: 10px; margin-top: 16px; } .jb-footer-social a { width: 32px; height: 32px; border-radius: 50%; background: rgba(255,255,255,.1); display: flex; align-items: center; justify-content: center; } .jb-footer-social svg { width: 15px; height: 15px; } .jb-footer-col h4 { color: #fff; font-size: 14.5px; font-weight: 700; margin: 0 0 16px; } .jb-footer-col a { display: block; color: rgba(255,255,255,.7); font-size: 13.5px; margin-bottom: 12px; } .jb-footer-col a:hover { color: var(--jt-yellow); } .jb-footer-bottom { display: flex; align-items: center; justify-content: space-between; flex-wrap: wrap; gap: 10px; padding: 18px 0; font-size: 12.5px; color: rgba(255,255,255,.55); } .jb-footer-bottom a { color: rgba(255,255,255,.75); text-decoration: underline; } @media (max-width: 900px) { .jb-footer-grid { grid-template-columns: 1fr 1fr; } } @media (max-width: 768px) { /* room for the fixed Ask a Question bar */ .jb-footer { padding-bottom: calc(60px + env(safe-area-inset-bottom)); } } @media (max-width: 560px) { .jb-footer-grid { grid-template-columns: 1fr; } } </style> <footer class="jb-footer"> <div class="jb-container"> <div class="jb-footer-grid"> <div> <div class="jb-footer-logo"> <img src="https://www.janbasktraining.com/assets2023/img/jt-images/jt-white.webp" alt="JanBask Training"> </div> <a href="tel:+917503384506" class="jb-footer-contact" id="jbFooterPhone"> <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M6.62 10.79a15.05 15.05 0 0 0 6.59 6.59l2.2-2.2a1 1 0 0 1 1.02-.24 11.36 11.36 0 0 0 3.57.57 1 1 0 0 1 1 1V20a1 1 0 0 1-1 1A17 17 0 0 1 3 4a1 1 0 0 1 1-1h3.5a1 1 0 0 1 1 1 11.36 11.36 0 0 0 .57 3.57 1 1 0 0 1-.25 1.02l-2.2 2.2z"></path></svg> <span class="jb-footer-phone-text">+91 7503384506</span> </a> <a href="mailto:info@janbasktraining.com" class="jb-footer-contact"> <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><rect x="3" y="5" width="18" height="14" rx="2"></rect><path d="m3 7 9 6 9-6"></path></svg> info@janbasktraining.com </a> <div class="jb-footer-social"> <a href="https://twitter.com/janbasktraining" target="_blank" rel="noopener" aria-label="Twitter"><svg viewBox="0 0 24 24" fill="currentColor" style="color:#fff"><path d="M18.9 2H22l-7.6 8.7L23 22h-6.9l-5.4-6.6L4.4 22H1.3l8.1-9.3L1 2h7l4.9 6.1L18.9 2Z"></path></svg></a> <a href="https://www.facebook.com/JanBasktraining" target="_blank" rel="noopener" aria-label="Facebook"><svg viewBox="0 0 24 24" fill="currentColor" style="color:#fff"><path d="M22 12.06C22 6.51 17.52 2 12 2S2 6.51 2 12.06c0 5 3.66 9.15 8.44 9.94v-7.03H7.9v-2.91h2.54V9.85c0-2.51 1.49-3.9 3.77-3.9 1.09 0 2.24.2 2.24.2v2.46h-1.26c-1.24 0-1.63.77-1.63 1.56v1.88h2.78l-.44 2.91h-2.34V22c4.78-.79 8.44-4.94 8.44-9.94z"></path></svg></a> <a href="https://www.linkedin.com/company/janbask-training/" target="_blank" rel="noopener" aria-label="LinkedIn"><svg viewBox="0 0 24 24" fill="currentColor" style="color:#fff"><path d="M6.94 5a2 2 0 1 1-4-.02 2 2 0 0 1 4 .02ZM3.5 8.5h3.9V21H3.5V8.5Zm6.6 0h3.74v1.71h.05c.52-.98 1.8-2.02 3.7-2.02 3.96 0 4.69 2.6 4.69 5.99V21h-3.9v-5.85c0-1.4-.03-3.2-1.95-3.2-1.96 0-2.26 1.53-2.26 3.1V21h-3.9V8.5Z"></path></svg></a> <a href="https://www.instagram.com/janbask_training/" target="_blank" rel="noopener" aria-label="Instagram"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" style="color:#fff"><rect x="3" y="3" width="18" height="18" rx="5"></rect><circle cx="12" cy="12" r="4"></circle><circle cx="17.5" cy="6.5" r="1"></circle></svg></a> <a href="https://www.youtube.com/janbasktraining" target="_blank" rel="noopener" aria-label="YouTube"><svg viewBox="0 0 24 24" fill="currentColor" style="color:#fff"><path d="M22 12s0-3.2-.4-4.7a3 3 0 0 0-2.1-2.1C17.9 5 12 5 12 5s-5.9 0-7.5.2a3 3 0 0 0-2.1 2.1C2 8.8 2 12 2 12s0 3.2.4 4.7a3 3 0 0 0 2.1 2.1C6.1 19 12 19 12 19s5.9 0 7.5-.2a3 3 0 0 0 2.1-2.1c.4-1.5.4-4.7.4-4.7ZM10 15.2V8.8L15.5 12 10 15.2Z"></path></svg></a> </div> </div> <div class="jb-footer-col"> <h4>JanBask Training</h4> <a href="https://www.janbasktraining.com/courses">Trending Courses</a> <a href="https://www.janbasktraining.com/job-assistance-program">Job Assistance</a> <a href="https://www.janbasktraining.com/blog">Blog</a> <a href="https://www.janbasktraining.com/community/">Community</a> <a href="https://www.janbasktraining.com/contact-us">Contact Us</a> <a href="https://www.janbasktraining.com/about-us">About Us</a> </div> <div class="jb-footer-col"> <h4>Join Us</h4> <a href="https://www.janbasktraining.com/corporate-training">Corporate Training</a> <a href="https://www.janbasktraining.com/login">Become a Learner</a> <a href="https://www.janbasktraining.com/insructor-login">Become an Instructor</a> <a href="https://www.janbasktraining.com/affiliate-program">Affiliate Program</a> <a href="https://www.janbasktraining.com/referral-discount/2">Refer & Earn</a> </div> <div class="jb-footer-col"> <h4>Useful Links</h4> <a href="https://www.janbasktraining.com/term-of-use">Terms of Use</a> <a href="https://www.janbasktraining.com/privacy-policy">Privacy Policy</a> <a href="https://www.janbasktraining.com/disclaimer">Disclaimer</a> <a href="https://www.janbasktraining.com/community/login_modal">Community Login</a> </div> </div> <div class="jb-footer-bottom"> <span>Copyright © 2026 JanBask Training. All Rights Reserved.</span> <a href="https://www.janbasktraining.com/privacy-policy">Privacy Policy</a> </div> </div> </footer> <script> /* Visitors in the US or Canada see the North America number. Detection is client-side on purpose: community pages are served with long public cache headers, so a server-rendered, per-country footer would be cached and shown to the wrong region. Order: country cookie set by the main site -> this session's cached lookup -> Cloudflare's same-origin /cdn-cgi/trace (free, no API key). No detection = India number. */ (function () { var link = document.getElementById('jbFooterPhone'); if (!link) return; var apply = function (cc) { if (cc !== 'US' && cc !== 'CA') return; link.href = 'tel:+12025993842'; var t = link.querySelector('.jb-footer-phone-text'); if (t) t.textContent = '+1 202 5993 842'; }; var cookie = document.cookie.match(/(?:^|;\s*)country_code=([A-Za-z]{2})/); var cached = ''; try { cached = sessionStorage.getItem('jb_cc') || ''; } catch (e) {} var known = (cookie && cookie[1]) || cached; if (known) { apply(known.toUpperCase()); return; } if (!window.fetch) return; fetch('/cdn-cgi/trace', { credentials: 'omit' }) .then(function (r) { return r.ok ? r.text() : ''; }) .then(function (txt) { var m = /^loc=([A-Z]{2})/m.exec(txt || ''); if (!m) return; try { sessionStorage.setItem('jb_cc', m[1]); } catch (e) {} apply(m[1]); }) .catch(function () { /* keep the default number */ }); })(); </script> <script src="https://www.janbasktraining.com/community/themes/default/assets/js/jquery.min.js"></script>

why refused to display in a frame because it set ‘X-Frame-Options' to 'sameorigin'?

About this question

Your answer

2 Answers