# Embedded comments not displayed due to X-Frame-Options DENY

**URL:** <https://meta.discourse.org/t/embedded-comments-not-displayed-due-to-x-frame-options-deny/47365>\
**Category:** Support\
**Created:** [15.Июль.2016 16:51:33 UTC](https://meta.discourse.org/t/embedded-comments-not-displayed-due-to-x-frame-options-deny/47365 "2016-07-15T16:51:33Z")\
**Posts on this page:** 1\
**Showing post:** 11

<div class="post-metadata">

**Author:** ![guiniol](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/guiniol/32/107449_2.png) [@guiniol](https://meta.discourse.org/u/guiniol)\
**Post date:** [17.Июль.2016 20:57:59 UTC](https://meta.discourse.org/t/embedded-comments-not-displayed-due-to-x-frame-options-deny/47365/11 "2016-07-17T20:57:59Z")

</div>

> [@guiniol](#):
>
> So… it seems it was nginx adding the DENY at the end. Not sure why exactly, but I think it may have to do with proxy\_set\_header X-Forwarded-Proto $scheme;. When I added add\_header X-Frame-Options “ALLOWALL”, I ended up with two ALLOWALL so I set it to add\_header X-Frame-Options “” and now I only have one (like I should).

Well, it was me all along. When I added ssl, I also added a few lines for security, one of which was the `X-Frame-Options DENY`. Mistery solved on that front.

---

_[View the full topic](https://meta.discourse.org/t/embedded-comments-not-displayed-due-to-x-frame-options-deny/47365)._