# Embedding an iframe with the Zoom App

**URL:** <https://devforum.zoom.us/t/embedding-an-iframe-with-the-zoom-app/103282>\
**Category:** Zoom Apps\
**Created:** [February 6, 2024, 7:12am UTC](https://devforum.zoom.us/t/embedding-an-iframe-with-the-zoom-app/103282 "2024-02-06T07:12:39Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![tomoko.okada77](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tomoko.okada77/32/51339_2.png) [@tomoko.okada77](https://devforum.zoom.us/u/tomoko.okada77)\
**Post date:** [February 6, 2024, 7:12am UTC](https://devforum.zoom.us/t/embedding-an-iframe-with-the-zoom-app/103282/1 "2024-02-06T07:12:39Z")

</div>

When I embed an iframe with the Zoom App, an error occurs in the zoom client.

- My App URL example  
[https://xxx.ngrok-free.app](https://xxx.ngrok-free.app)

- iframe src example  
[https://yyy.com](https://yyy.com)

- error contents  
Blocked a frame with origin “[https://xxx.ngrok-free.app](https://xxx.ngrok-free.app)” from accessing a frame with origin “[https://yyy.com](https://yyy.com)”. Protocols, domains, and ports must match.

I added Content-Secrity-Policy frame-ancestors “[appssdk.zoom.us](http://appssdk.zoom.us)” and “[https://xxx.ngrok-free.app](https://xxx.ngrok-free.app)” to [https://yyy.com](https://yyy.com) 's header.

Are there any other values that should be allowed?  
Thanks in advance.