I'm trying to load external content into an iframe, & it is working in Chrome & Firefox, but it won't load in Safari. In Safari I get the error message:
Refused to display 'my_content' in a frame because it set 'X-Frame-Options' to 'sameorigin'
I think the issue may be that my WordPress install is in a subdirectory:
The header for my external content includes the following:
X-Frame-Options: sameorigin Content-Security-Policy: frame-ancestors 'self' https://example.com X-Content-Security-Policy: frame-ancestors 'self' https://example.com
This article lists a number of possible reasons for the issue with Safari & SAMEORIGIN https://halfelf.org/2018/safari-and-sameorigin/. I don't have any extra X-Frame-Options in my .htaccess file, so I'm wondering if the issue is related to my WordPress install being located in a subdirectory. Is there a workaround for this? Or is this caused by something else?