Skip to the article
Solta

An embed will not load

The snippet is on your page and the frame is empty, grey, or showing the browser's “refused to connect”. Either the site will not be framed there, or your page will not frame it. The console says which.

Which side refused

Open your page, then the browser's console (right-click, Inspect, Console) and reload:

  • A message mentioning frame-ancestors means the site refused to be framed by your page — the next two sections.
  • One mentioning frame-src, child-src or default-src means your page refused to frame the site — its own Content Security Policy. That is the last section.

The site is behind a door

A Password, Invited or Private site, or one that asks for an email first, is never framed on another website. Its door needs the whole browser tab to itself, not a frame inside somebody else's page, so the browser shows nothing there. Embed a Public or Unlisted site, or send the link instead. Who can open it.

Your website is not on the site's list

By default a site can be embedded anywhere. If domains are listed in its embed settings, only those may frame it, and the rule is exact: www.acme.com and acme.com are different names, and so is a staging address. Add each one the page is served from, or clear the list. Which sites may.

Your page's own Content Security Policy

If your website sends a Content Security Policy — set by your host, a security plugin, or a framework's defaults — it decides which frames your page may show and which scripts it may run. The embed needs both: the frame, from the site's address, and, for Auto height, the small script from https://solta.now that sizes it. Add these to the directives you already have, rather than replacing them:

frame-src https://*.solta.site;
script-src 'self' https://solta.now;

If the site is on your own domain, put that domain in frame-src instead of *.solta.site. With no frame-src in your policy, child-src and then default-src are what count, so add it there if that is what you have.

If you cannot change the policy — some page builders do not let you — use the Fixed height snippet, which needs no script, and only frame-src has to allow the site.

It loads, but is cut off or scrolls

That is Auto height without its script: the frame keeps the height written in the snippet, and the site scrolls inside it. Something removed the <script> line — a page builder that strips scripts, or a policy that blocks it, as above. Put it back, allow it, or switch to Fixed height and choose a height that fits.