The Website Firewall Platform blocks iFrames by default.

If your website required iFrame functionality, please disable the ‘force sec headers’ option in the Website Firewall Configuration management page.

Please Note:

  • All iFrames on HTTPS pages must also be HTTPs
  • Use require(), include() or require_once() functions instead of iframing PHP files