[velomash]

These days it's a security concern to allow any random site to iFrame your property due to clickjacking. This is why you see X-Frame-Options headers blocking / whitelisting who can iFrame sites.