Enabling “Use secure frame headers” in Webflow will block the ability to embed your site in an iframe on other websites. This setting adds the X-Frame-Options header with the value DENY or SAMEORIGIN , which prevents your site from being framed or embedded into other sites. This is a security measure to protect against clickjacking attacks.
Not clear to me that you disabled that. Even if you did webflow.io domains can’t be IFRAMEd. You would need a custom domain.
I actually disabled the “Use secure frame headers” too. The problem is coming from the webflow.io domain, already working on getting a domain. Thanks for your help.