Embeddable on some sites only

open.spotify.com · 200 OK · 160 ms

Only these sites may embed it: 'self', https://adgen-dev.spotify.com/account/*/ad/*/details, https://adgen-dev.spotify.com/preview/*, https://local.spotify.net/account/*/ad/*/details, https://local.spotify.net/preview/*, https://app.smartly.io/*.

Preview Headers Sandbox Embed code

sandbox

allow-scriptsRun JavaScript
allow-same-originCookies, storage
allow-formsSubmit forms
allow-popupsOpen new windows
allow-popups-to-escape-sandboxPopups without sandbox
allow-modalsalert(), confirm()
allow-top-navigationRedirect your page
allow-top-navigation-by-user-activationRedirect after a click
allow-downloadsDownload files
allow-presentationStart a presentation
allow-pointer-lockLock the pointer
allow-storage-access-by-user-activationAsk for cookies

allow (permissions)

What this frame allows

No sandbox: the page gets the normal rights of a cross-origin frameno sandbox attribute

<iframe src="https://open.spotify.com/track/0Lr4kGOYn9l83EjuK6cZFQ"></iframe>

Know before you embed.

Free, no sign-up, nothing stored. Paste a URL and get a verdict, a live preview, and the fix.

Test a URL Browse guides

GET https://your-app.com/widget
200 OK · 142 ms · HTTPS

x-frame-options     —
frame-ancestors     *
verdict             embeddable

your-app.comgithub.comcalendly.com

iframecheck

Check if any page can be embedded, see why, and fix it.

Tools

Iframe checker
Sites directory
Responsive preview
Bulk check
Embed code
Header generator
Clickjacking test
Sandbox playground

Learn

Guides
Errors
Platforms
Glossary
X-Frame-Options
frame-ancestors

Fix guides

Nginx
Apache
Vercel
Cloudflare
Next.js

Project

About
Changelog
RSS feed
Contact

Updated Oct 16, 2026

Privacy
Terms