Embeddable on any site

form.jotform.com · 200 OK · 110 ms

No header blocks framing.

Framing rules

  • X-Frame-Optionsabsent

    The page sends no X-Frame-Options.

  • frame-ancestorsabsent

    No enforced Content-Security-Policy sets frame-ancestors.

  • Set-Cookieabsent

    The page sets no cookies, so cookies do not change how it works in a frame.

  • Cross-Origin-Resource-Policyabsent

    Not sent. A cross-origin page with Cross-Origin-Embedder-Policy: require-corp cannot embed it.

Raw response headers

HTTP 200 OK
access-control-allow-origin: *
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cache-control: no-cache
cache-hit: L2
cf-cache-status: DYNAMIC
cf-ray: a5799dac5b933a24-CMH
connection: close
content-type: text/html; charset=utf-8
date: Mon, 09 Nov 2026 03:08:57 GMT
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
transfer-encoding: chunked
vary: Accept-Encoding
via: 1.1 google
x-httpx-dc: ue4
x-httpx-id: 01a1be47-c7d0-72c3-8719-368fb60556a7

Fetched from our server with a plain browser request. Headers can differ by region, or when you are signed in.

Know before you embed.

Free, no sign-up, nothing stored. Paste a URL and get a verdict, a live preview, and the fix.