Windows 10 will reach EOS (end of support) on October 14, 2025. For more information, see this article.

חיפוש בתמיכה

יש להימנע מהונאות תמיכה. לעולם לא נבקש ממך להתקשר או לשלוח הודעת טקסט למספר טלפון או לשתף מידע אישי. נא לדווח על כל פעילות חשודה באמצעות באפשרות ״דיווח על שימוש לרעה״.

מידע נוסף

Firefox won't display a page embedded in another site

  • 10 תגובות
  • 7 have this problem
  • 870 views
  • תגובה אחרונה מאת William Tucker

more options

So I understand this: https://support.mozilla.org/en-US/kb/xframe-neterror-page and the reason it exists, but I need to find a way to turn it off because it's literally blocking me from accessing the Library of Congress webpage inside the same browser for my job. It's not a malicious site, but I can't figure out how to tell Firefox to stop blocking it as if it was a malicious site.

Help.

So I understand this: https://support.mozilla.org/en-US/kb/xframe-neterror-page and the reason it exists, but I need to find a way to turn it off because it's literally blocking me from accessing the Library of Congress webpage inside the same browser for my job. It's not a malicious site, but I can't figure out how to tell Firefox to stop blocking it as if it was a malicious site. Help.

פתרון נבחר

I understand now. I've done a bit of research, and sadly you can't disable Firefox's enforcement of X-Frame-Options or CSP frame-ancestors (which is what's causing the issue) as they're server-side security policies. No built-in setting exists to turn this off due to clickjacking risks. Sorry.

Read this answer in context 👍 0

כל התגובות (10)

more options

What OS? If windows, home or pro and are you running any security software besides MS Defender? What version of Firefox? Show the issue. Provide steps to replicate the issue.

more options

Mac OS 15.4 Firefox version 137.01

As for replicating the issue, that's not likely to happen unless you have Alma.

Here's a screenshot.. but yeah if I go to Editing Actions> Field Information. I get this error.

more options

Is your issue similar to this? https://support.mozilla.org/en-US/questions/1505079#answer-1724770 You should provide steps to replicate your issue. The screenshot you posted leaves me....

השתנתה ב־ על־ידי jonzn4SUSE

more options

No, it has nothing to do with iframe.

I'm trying to open a page within the existing page. And for some reason, Firefox has decided it can't do that anymore because it could be used to hijack the browser and download malicious material. But this is the Library of Congress webpage, it's not malicious at all.

i just need to figure out the security settings that need to change so I can tell Firefox to trust the.. library of congress.

more options

Show the issue.

more options

Here is a screen recording of the issue.

https://drive.google.com/file/d/1-6SmwuMMSSifRQaK90kPZOCSzNLLfy1J/view?usp=sharing

I don't know how to show the issue anymore than this.

more options

I'm pretty sure either the website has disabled embedding, or the website that's being embedded already has another embed in it. I'm not too sure.

השתנתה ב־ על־ידי William Tucker

more options
To visit a site that displays this error message, you can right-click the embed and select Open Link in New Tab or Open Link in New Window. Alternatively, you can copy and paste the link into an already open new tab or window. However, be aware that the embedding page may not function correctly without access to the blocked content. In such cases, you may need to contact the owner of the problematic site for further assistance.

Sourced from https://support.mozilla.org/en-US/kb/xframe-neterror-page

more options

Yes, I understand what is happening.

I need it to STOP IT from happening so that the site can work as it is supposed to, not telling me to just open in a new window cause that doesn't solve the issue. That's just having another website open.

more options

פתרון נבחר

I understand now. I've done a bit of research, and sadly you can't disable Firefox's enforcement of X-Frame-Options or CSP frame-ancestors (which is what's causing the issue) as they're server-side security policies. No built-in setting exists to turn this off due to clickjacking risks. Sorry.