Nextcloud in Iframe doesn't work

Hello guys,

we instaled Nextcloud 11 and we want to see all shareable links (in special videos) in our internal site - IN IFRAME (we don’t know other solution)

We don’t need any security beacause it’s a small network without internet.

For Owncloud 9.1 we just comment this lines from .htaccess file

# Add security and privacy related headers **# Header set X-Content-Type-Options "nosniff"** Header set X-XSS-Protection "1; mode=block" Header set X-Robots-Tag "none" **# Header set X-Frame-Options "SAMEORIGIN"** Header set X-Download-Options "noopen" Header set X-Permitted-Cross-Domain-Policies "none" SetEnv modHeadersAvailable true

, but in Nextcloud 11 doesn’t work.

When i go in our internal site - the error from Google Chrome is:

Refused to display ‘’ in a frame because it set ‘X-Frame-Options’ to ‘Sameorigin’.

Can you help us ?
Best regards

Did you restart the server to make sure there are no cached values anywhere? In doubt you can use curl to retrieve the page and check if the headers are still in.

I only made a quick search on the code, could be inserted also via PHP:


I searched for all response.php files with WinSCP, in the Nextcloud folder

And I commented all the lines with - header(‘X-Frame-Options: SAMEORIGIN’);

The problem was in => Nextcloud/lib/private/legacy/response.php line 264

Thank You!

hey,i have the same problem. I want to make nextcloud into our site’s iframe , I disable " header(‘X-Frame-Options: SAMEORIGIN’); // Disallow iFraming from other domains " in response.php. but it doesn’t work. Can you give me some advice?