Embeddable on some sites only
open.spotify.com · 200 OK · 149 ms
Only these sites may embed it: 'self', https://adgen-dev.spotify.com/account/*/ad/*/details, https://adgen-dev.spotify.com/preview/*, https://local.spotify.net/account/*/ad/*/details, https://local.spotify.net/preview/*, https://app.smartly.io/*.
X-Frame-Options
Not sent
CSP frame-ancestors
'self' https://adgen-dev.spotify.com/account/*/ad/*/details https://adgen-dev.spotify.com/preview/* https://local.spotify.net/account/*/ad/*/details https://local.spotify.net/preview/* https://app.smartly.io/*
Cookies
5 set · SameSite: None, not set
Response
200 OK · 149 ms · HTTPS
Own this site?
Allow framing in two lines
Remove X-Frame-Options and list the sites that may embed you in frame-ancestors. Pick your server to get the config.
Read the full guidelocation / {
proxy_hide_header X-Frame-Options;
add_header Content-Security-Policy "frame-ancestors 'self' https://your-site.com" always;
}nginx.confReplace your-site.com with the site that embeds this page.