Concrete 8.3; html editor error: Refused to display in a frame because it set 'X-Frame-Options' to 'deny'

Permalink
In concrete 8.3 when I try to modify a block by using the html editor I get the error:

Refused to display in a frame because it set 'X-Frame-Options' to 'deny'.

I also get Blocked a frame with origin "https://mydomain" from accessing a frame with origin "null". The frame requesting access has a protocol of "https", the frame being accessed has a protocol of "data". Protocols must match.

Is there a way I can fix this?

Thank you all

arael78
 
MrKDilkington replied on at Permalink Reply
MrKDilkington
Hi arael78,

By default, I believe concrete5 is set to use the X-Frame-Options of SAMEORIGIN.
https://github.com/concrete5/concrete5/blob/develop/concrete/config/...

Just a guess, but your server may be overriding this.
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Op...

A suggestion would be to contact your web host about this.