The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a <frame>, <iframe>, <embed> or <object>. Sites can use this to avoid click-jacking attacks, by ensuring that their content is not embedded into other sites.

The added security is provided only if the user accessing the document is using a browser that supports X-Frame-Options.

Note: The Content-Security-Policy HTTP header has a frame-ancestors directive which obsoletes this header for supporting browsers.

There are two possible directives for X-Frame-Options: X-Frame-Options: DENY X-Frame-Options: SAMEORIGIN

This happens if this web page wants to open an external page in an iframe and that website prohibits this via a X-FRAME-OPTIONS header in the HTTP response headers.

As a possible workaround you can right-click the frame area with the error message and see if you can use "This Frame: Show Only This Frame" or "This Frame: Open Frame in New Tab" to get that page working.

Hellow support:

I want to remove X-Frame-Options... it screws up my daily work flow regardless of your good intentions, I want it removed,

Please.

_{email address removed by moderator.}

Hellow support: I want to remove X-Frame-Options... it screws up my daily work flow regardless of your good intentions, I want it removed, Please. _{email address removed by moderator.}

michael218, Please don't re-use other threads to ask for help. See Mozilla Support rules and guidelines. If the workaround in this question did not solve your issue, please ask a new question. I'll close this thread.