Blocked: this page cannot be embedded
github.com · 429 Too Many Requests · 68 ms
github.com sends X-Frame-Options: DENY. Every browser will refuse to show it in a frame.
Framing rules
- X-Frame-Options: denydeny
DENY stops every site from framing the page.
- frame-ancestorsabsent
No enforced Content-Security-Policy sets frame-ancestors.
- Set-Cookieabsent
The page sets no cookies, so cookies do not change how it works in a frame.
- Cross-Origin-Resource-Policyabsent
Not sent. A cross-origin page with Cross-Origin-Embedder-Policy: require-corp cannot embed it.
Raw response headers
HTTP 429 Too Many Requests
cache-control: no-cache
cf-cache-status: DYNAMIC
cf-ray: a5919ecd5baf3524-CMH
connection: close
content-security-policy: default-src 'none'; style-src 'unsafe-inline'
content-type: text/html; charset=utf-8
date: Thu, 12 Nov 2026 01:04:02 GMT
retry-after: 300
server: cloudflare
strict-transport-security: max-age=31536000; includeSubDomains; preload
transfer-encoding: chunked
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 0Fetched from our server with a plain browser request. Headers can differ by region, or when you are signed in.