Blocked: this page cannot be embedded

github.com · 429 Too Many Requests · 62 ms

github.com sends X-Frame-Options: DENY. Every browser will refuse to show it in a frame.

Framing rules

  • X-Frame-Options: denydeny

    DENY stops every site from framing the page.

  • frame-ancestorsabsent

    No enforced Content-Security-Policy sets frame-ancestors.

  • Set-Cookieabsent

    The page sets no cookies, so cookies do not change how it works in a frame.

  • Cross-Origin-Resource-Policyabsent

    Not sent. A cross-origin page with Cross-Origin-Embedder-Policy: require-corp cannot embed it.

Raw response headers

HTTP 429 Too Many Requests
cache-control: no-cache
cf-cache-status: DYNAMIC
cf-ray: a59192fffe07ada9-CMH
connection: close
content-security-policy: default-src 'none'; style-src 'unsafe-inline'
content-type: text/html; charset=utf-8
date: Thu, 12 Nov 2026 00:55:58 GMT
retry-after: 300
server: cloudflare
strict-transport-security: max-age=31536000; includeSubDomains; preload
transfer-encoding: chunked
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 0

Fetched from our server with a plain browser request. Headers can differ by region, or when you are signed in.

Know before you embed.

Free, no sign-up, nothing stored. Paste a URL and get a verdict, a live preview, and the fix.