Embeddable on any site
form.jotform.com · 200 OK · 68 ms
No header blocks framing.
Framing rules
- X-Frame-Optionsabsent
The page sends no X-Frame-Options.
- frame-ancestorsabsent
No enforced Content-Security-Policy sets frame-ancestors.
- Set-Cookieabsent
The page sets no cookies, so cookies do not change how it works in a frame.
- Cross-Origin-Resource-Policyabsent
Not sent. A cross-origin page with Cross-Origin-Embedder-Policy: require-corp cannot embed it.
Raw response headers
HTTP 200 OK
access-control-allow-origin: *
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cache-control: no-cache
cache-hit: L2
cf-cache-status: DYNAMIC
cf-ray: a579ac17683ec69c-CMH
connection: close
content-type: text/html; charset=utf-8
date: Mon, 09 Nov 2026 03:18:48 GMT
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
transfer-encoding: chunked
vary: Accept-Encoding
via: 1.1 google
x-httpx-dc: ue4
x-httpx-id: 01a1be50-cab6-74e4-92e8-4aab94edc927Fetched from our server with a plain browser request. Headers can differ by region, or when you are signed in.