Blocked: this page cannot be embedded

gist.github.com · 200 OK · 567 ms

gist.github.com sends CSP frame-ancestors 'none'. Every browser will refuse to show it in a frame.

X-Frame-Options

deny (ignored)

CSP frame-ancestors

'none'

3 set · SameSite: Lax

Response

200 OK · 567 ms · HTTPS

Own this site?

Allow framing in two lines

Remove X-Frame-Options and list the sites that may embed you in frame-ancestors. Pick your server to get the config.

location / {
  proxy_hide_header X-Frame-Options;
  add_header Content-Security-Policy "frame-ancestors 'self' https://your-site.com" always;
}

nginx.confReplace your-site.com with the site that embeds this page.

Full width × 720

gist.github.com refused to connect.

This is what your visitors would see.