Hey gang! Any insight on why some sites can be Embedded into a HTML doc with a HTML Element, and others can't?
Here's a snap of misbehaving apple.com and well-behaved tumult.com (perhaps a metaphor, you decide), in two separate HTML Elements. Literally, the only difference between the two is one says https://apple.com and the other says https://tumult.com.
It’s because of cross domain policy. Apple has it set to “sameorigin” so you won’t be able to get anything from Apple’s website displayed unless you’re serving the HTML widget (iframe) on the same server as Apple.