Embeddable on some sites only
google.com · 200 OK · 162 ms
www.google.com sends X-Frame-Options: SAMEORIGIN. Only pages on its own origin may embed it.
allow (permissions)
What this frame allows
- No sandbox: the page gets the normal rights of a cross-origin frameno sandbox attribute
<iframe src="https://www.google.com/maps"></iframe>