Andy Burns wrote:

Chris J Dixon wrote:

The loading of
“https://tickets.nottinghamplayhouse....e&resize=true”
in a frame is denied by “X-Frame-Options“ directive set to
“SAMEORIGIN“. loginlogout.aspx


The http headers I receive for that page doesn't include any
X-Frame-Options field, let alone one containing sameorigin

I see they are front-ended by cloudflare, wonder if virgin customers are
reaching a stale copy of the page because virgin have a set of
cloudflare caches "locally"?

I have absolutely no idea, or what to do to find out.

Chris
--
Chris J Dixon Nottingham UK
@ChrisJDixon1

Plant amazing Acers.