I found two knowledge points in my work today, namely iframe and X-Frame-Options
iframe
Iframe is a powerful tool for rapid development, and you can understand it as componentized development by setting it up.
Introducing a webpage into another webpage, this is the magical power that iframes can provide.
For a long time, I think that iframe is an outdated technology. I didn't expect that there is still a lot of use in work. What's more terrifying is that the development of iframe is very flexible.
X-Frame-Options
The X-Frame-Options response header can be used to indicate whether a browser should be allowed to render a page. In <frame>
layman's terms, if your website sets this header to deny, then others can't put your website Put it in an iframe, because the browser knows it, you don’t want people to use it like that.
