Symptom
Your mashup is not loading in the UI even though everything appears to be set correctly. You check the browser console and notice an error message: Refused to display 'http://insert-your-url-here.com' in a frame because it set 'X-Frame-Options' to 'deny'.
Environment
SAP Hybris Cloud For Customer
Cause
For a page to be rendered within a frame, it has to have the X-Frame-Options parameter set accordingly. e.g. If your source page was configured with the parameter 'Deny' it will never render in any frame.
There are three possible options for the X-Frame-Options:
X-Frame-Options: DENY
X-Frame-Options: SAMEORIGIN
X-Frame-Options: ALLOW-FROM https://example.com/
The compatibility of the parameters vary depending on the browser / system where your page is trying to be rendered.
Resolution
The page which you want to be displayed within the mashup frame has to have the correct parameter configured for the X-Frame-Options. You must check with the developer of the source page.
Keywords
Mashup; Display; Frame; X-Frame-Options; Deny; HTML; , KBA , x-frame , AP-RC-GEN-MSH , Mashups , Problem