CSP: frame-ancestors

Publisher

MDN Web Docs (Mozilla)

URL

https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/frame-ancestors

Published

2026-08-27

Updated

unknown

Accessed

2026-09-30

HTTP status

200

License

CC-BY-SA 2.5; attribution required; short excerpts and locators only

Source notes citing this source

• An agentx-wc-iframe widget works only if the embedded site allows the Agent Desktop origin as a frame parent (no X-Frame-Options deny or restrictive frame-ancestors). Cisco's layout article does not discuss this. inferred in context
• The CSP frame-ancestors directive controls which parent pages may embed a page in an iframe. Setting it to 'none' is similar to X-Frame-Options: deny. in context

Cite this source record

APA

WarmTransfer. (2026, August 27). CSP: frame-ancestors. WarmTransfer. https://warmtransfer.net/knowledge/sources/mdn-csp-frame-ancestors

BibTeX

@misc{warmtransfer-mdn-csp-frame-ancestors,
  title  = {CSP: frame-ancestors},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/mdn-csp-frame-ancestors},
  note   = {MDN Web Docs (Mozilla), accessed 2026-09-30}
}