# Iframe src doesn't work at a specific webpage

**URL:** <https://forums.ankiweb.net/t/iframe-src-doesnt-work-at-a-specific-webpage/58189>\
**Category:** Help\
**Created:** [March 30, 2025, 12:22pm UTC](https://forums.ankiweb.net/t/iframe-src-doesnt-work-at-a-specific-webpage/58189 "2025-03-30T12:22:45Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![note](https://avatars.discourse-cdn.com/v4/letter/n/b77776/32.png) [@note](https://forums.ankiweb.net/u/note)\
**Post date:** [March 30, 2025, 12:22pm UTC](https://forums.ankiweb.net/t/iframe-src-doesnt-work-at-a-specific-webpage/58189/1 "2025-03-30T12:22:45Z")

</div>

I added following to Card Template and this works very well to load URL at a reverse card.

But it can’t load OxfordLearnersDictionaries web

What’s wrong with this? Any solution?

---

<div class="post-metadata">

**Author:** ![ferophila](https://sea2.discourse-cdn.com/flex002/user_avatar/forums.ankiweb.net/ferophila/32/10566_2.png) [@ferophila](https://forums.ankiweb.net/u/ferophila)\
**Post date:** [March 30, 2025, 1:00pm UTC](https://forums.ankiweb.net/t/iframe-src-doesnt-work-at-a-specific-webpage/58189/2 "2025-03-30T13:00:32Z")

</div>

What did you add?

---

<div class="post-metadata">

**Author:** ![note](https://avatars.discourse-cdn.com/v4/letter/n/b77776/32.png) [@note](https://forums.ankiweb.net/u/note)\
**Post date:** [March 30, 2025, 1:35pm UTC](https://forums.ankiweb.net/t/iframe-src-doesnt-work-at-a-specific-webpage/58189/3 "2025-03-30T13:35:53Z")

</div>

Just simple iframe src=“{{URL}}” /iframe with some size settings.

it works for many webpages but it doesn’t work for some like OLD web.

---

<div class="post-metadata">

**Author:** ![SuhasK](https://avatars.discourse-cdn.com/v4/letter/s/bbe5ce/32.png) [@SuhasK](https://forums.ankiweb.net/u/SuhasK)\
**Post date:** [March 30, 2025, 3:25pm UTC](https://forums.ankiweb.net/t/iframe-src-doesnt-work-at-a-specific-webpage/58189/4 "2025-03-30T15:25:02Z")

</div>

Could you send that exact string in block quotes like so?  
```  
The code goes here  
```

---

<div class="post-metadata">

**Author:** ![note](https://avatars.discourse-cdn.com/v4/letter/n/b77776/32.png) [@note](https://forums.ankiweb.net/u/note)\
**Post date:** [March 30, 2025, 4:47pm UTC](https://forums.ankiweb.net/t/iframe-src-doesnt-work-at-a-specific-webpage/58189/5 "2025-03-30T16:47:47Z")

</div>

```auto
<iframe src="{{URL}}" style=" border:0.5px solid black; padding: 0px; width: 415px; height: 1920px;"></iframe>

```

{{URL}} is an additional field of the note type

---

<div class="post-metadata">

**Author:** ![mausprz](https://avatars.discourse-cdn.com/v4/letter/m/848f3c/32.png) [@mausprz](https://forums.ankiweb.net/u/mausprz)\
**Post date:** [March 30, 2025, 4:59pm UTC](https://forums.ankiweb.net/t/iframe-src-doesnt-work-at-a-specific-webpage/58189/6 "2025-03-30T16:59:53Z")

</div>

Any web page might refuse to load within an iframe if the main site server implemented the `X-Frame Options` HTTP header to `DENY` or `SAMEORIGIN` which directly restricts src embedding.

Similarly, some Content Security Policy (CSP) directives further reinforces this, blocking content interactions between different domains, protocols, or ports.

This kind of security measures are intended to prevent clickjacking attacks where malicious sites overlay hidden iframes to trick users. Sadly, there is nothing we can do to get around that.

EDIT: follow the next link for further references about [oxfordlearnersdictionaries.com security](https://securityheaders.com/?q=oxfordlearnersdictionaries.com&followredirects=on) headers.

---

<div class="post-metadata">

**Author:** ![rossgb](https://sea2.discourse-cdn.com/flex002/user_avatar/forums.ankiweb.net/rossgb/32/23908_2.png) [@rossgb](https://forums.ankiweb.net/u/rossgb)\
**Post date:** [March 30, 2025, 5:05pm UTC](https://forums.ankiweb.net/t/iframe-src-doesnt-work-at-a-specific-webpage/58189/7 "2025-03-30T17:05:01Z")

</div>

Just to confirm: [www.oxfordlearnersdictionaries.com](http://www.oxfordlearnersdictionaries.com) is responding with: `X-Frame-Options: SAMEORIGIN`

---

<div class="post-metadata">

**Author:** ![note](https://avatars.discourse-cdn.com/v4/letter/n/b77776/32.png) [@note](https://forums.ankiweb.net/u/note)\
**Post date:** [March 31, 2025, 12:26am UTC](https://forums.ankiweb.net/t/iframe-src-doesnt-work-at-a-specific-webpage/58189/8 "2025-03-31T00:26:00Z")

</div>

Then, Is a way to webclip (like Notability, etc.) to Back field of an Anki card on iphone?

---

<div class="post-metadata">

**Author:** ![mausprz](https://avatars.discourse-cdn.com/v4/letter/m/848f3c/32.png) [@mausprz](https://forums.ankiweb.net/u/mausprz)\
**Post date:** [March 31, 2025, 12:52am UTC](https://forums.ankiweb.net/t/iframe-src-doesnt-work-at-a-specific-webpage/58189/9 "2025-03-31T00:52:41Z")

</div>

> Then, Is a way to webclip (like Notability, etc.) to Back field of an Anki card on iphone?

Other than taking screenshots or literally ripping entire webpages, I don’t think there are many practical alternatives.

Another option is to look for another site that doesn’t enforce strict Content Security Policies (CSP) although this will become an increasingly rare practice in the near future.

At the end, it will always be going to be best for you to make and maintain your own offline content.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex002/uploads/anki2/original/1X/8f1279ababc5879d54e4838989f606cfe55af8c7.jpeg) [@system](https://forums.ankiweb.net/u/system)\
**Post date:** [April 30, 2025, 12:53am UTC](https://forums.ankiweb.net/t/iframe-src-doesnt-work-at-a-specific-webpage/58189/10 "2025-04-30T00:53:00Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.