# 由于X-Frame-Options为DENY，嵌入式评论未显示

**URL:** <https://meta.discourse.org/t/embedded-comments-not-displayed-due-to-x-frame-options-deny/47365>\
**Category:** Support\
**Created:** [2016 年7 月 15 日 16:51 UTC](https://meta.discourse.org/t/embedded-comments-not-displayed-due-to-x-frame-options-deny/47365 "2016-07-15T16:51:33Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

作者： ![guiniol](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/guiniol/32/107449_2.png) [@guiniol](https://meta.discourse.org/u/guiniol)\
发布日期： [2016 年7 月 15 日 16:51 UTC](https://meta.discourse.org/t/embedded-comments-not-displayed-due-to-x-frame-options-deny/47365/1 "2016-07-15T16:51:33Z")

</div>

Hello,

I setup comments on my blog using this guide: [Embed Discourse comments on another website via Javascript](https://meta.discourse.org/t/embedding-discourse-comments-via-javascript/31963)

It worked at some point, but now the comments are not displayed. In the firefox console, I see:

```plaintext
Load denied by X-Frame-Options: https://... does not permit framing.

```

And in the network section, for this resource, I see that:

```plaintext
X-Frame-Options: "ALLOWALL, DENY"

```

I have no idea what’s going on, but I think it may be related to SSL.  
Both the blog and the discourse instance are behind a reverse proxy which does the actual SSL.

The blog is here: [https://avril4th.com](https://avril4th.com)  
and the discourse instance: [https://discourse.avril4th.com](https://discourse.avril4th.com)

I’m not sure what other information could be relevant.

Cheers,

---

_[View the full topic](https://meta.discourse.org/t/embedded-comments-not-displayed-due-to-x-frame-options-deny/47365)._