Embeddable on any site
wistia.com · 200 OK · 180 ms
No header blocks framing.
Framing rules
- X-Frame-Optionsabsent
The page sends no X-Frame-Options.
- frame-ancestorsabsent
No enforced Content-Security-Policy sets frame-ancestors.
- Set-Cookieabsent
The page sets no cookies, so cookies do not change how it works in a frame.
- Cross-Origin-Resource-Policyabsent
Not sent. A cross-origin page with Cross-Origin-Embedder-Policy: require-corp cannot embed it.
Raw response headers
HTTP 200 OK
age: 22545
cache-control: s-maxage=86400, stale-while-revalidate=31449600
cf-cache-status: DYNAMIC
cf-ray: a579ac00fafbc69c-CMH
connection: close
content-type: text/html; charset=utf-8
date: Mon, 09 Nov 2026 03:18:44 GMT
etag: W/"9yt38ljpsp602c"
link: </.well-known/api-catalog>; rel="api-catalog"
server: cloudflare
transfer-encoding: chunked
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding
via: 1.1 c6cf91c1274050d33d12227585fc8efc.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-id: YI7ZNPa17-xKm7IAkiWqwqHT06x8CeLLa46ch9RbA5UTTakSBZ22Pw==
x-amz-cf-pop: IAD55-P6
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 3, 156
x-envoy-upstream-service-time: 6
x-nextjs-cache: HIT
x-nextjs-prerender: 1
x-nextjs-stale-time: 300
x-powered-by: Next.js
x-served-by: cache-iad-khef600051-IAD, cache-pdk-kfty8610023-PDK
x-timer: S1794194325.713275,VS0,VE0Fetched from our server with a plain browser request. Headers can differ by region, or when you are signed in.