The minimum code. Why radwindow can show, let's say "bing.com", "www.wikipedia.org", but refused to show "google.com" and even "telerik.com". Even telerik demo gives "www.google.com refused to connect", or "www.telerik.com refused to connect"
Rumen
Telerik team
commented on 09 Jan 2024, 01:15 PM
| edited
This is because the Telerik.com and Google.com sites are configured with <add name="X-Frame-Options" value="SAMEORIGIN" />, which means that the page can only be displayed if all ancestor frames are same origin to the page itself.
If you look at the devtools console you will probably see this error:
Refused to display 'https://www.google.com/' in a frame because it set 'X-Frame-Options' to 'sameorigin'.
X-Frame-Options:SAMEORIGIN means that the page can only be embedded in a frame on a page with the same origin as itself.
This is because the Telerik.com and Google.com sites are configured with <add name="X-Frame-Options" value="SAMEORIGIN" />, which means that the page can only be displayed if all ancestor frames are same origin to the page itself.
If you look at the devtools console you will probably see this error:
Refused to display 'https://www.google.com/' in a frame because it set 'X-Frame-Options' to 'sameorigin'.
X-Frame-Options:SAMEORIGIN means that the page can only be embedded in a frame on a page with the same origin as itself.