# Inline Frame Component unable to access most URLs

**URL:** <https://forum.inductiveautomation.com/t/inline-frame-component-unable-to-access-most-urls/29085>\
**Category:** Ignition\
**Created:** [October 15, 2019, 5:41am UTC](https://forum.inductiveautomation.com/t/inline-frame-component-unable-to-access-most-urls/29085 "2019-10-15T05:41:25Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [October 16, 2019, 4:07pm UTC](https://forum.inductiveautomation.com/t/inline-frame-component-unable-to-access-most-urls/29085/2 "2019-10-16T16:07:36Z")

</div>

There’s currently an issue with the referrer policy you set not actually being used on the page, but the main drawback to iframes is that _many_ websites will not support rendering if they’re inside a frame. This is done via the [`x-frame-options`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options) HTTP header, which [all browsers support](https://caniuse.com/#feat=x-frame-options). If a given page returns a `DENY` or `SAMEORIGIN` value for `x-frame-options`, then your web browser will refuse to render the content inside the iframe component in your Perspective page.

There’s nothing we can do to change that - the entire point of `x-frame-options` is to (help) prevent a class of web security attacks called [clickjacking](https://en.wikipedia.org/wiki/Clickjacking).

---

_[View the full topic](https://forum.inductiveautomation.com/t/inline-frame-component-unable-to-access-most-urls/29085)._