What it is
Embeds any web page or web app inside a dashboard tile using an HTML <iframe>.
Config fields
| Field | What it controls | Example |
|---|
| URL | The full URL to load inside the frame. Must start with https:// or http://. | https://status.example.com |
Common pitfalls
- X-Frame-Options / CSP blocks. Many sites send
X-Frame-Options: DENY or a Content-Security-Policy: frame-ancestors 'none' header, which makes the browser refuse to render them inside an iframe. There is no client-side workaround for this — the site operator must allow framing. dotBlast runs a server-side iframe proxy for a subset of known-safe sources; for other sites you will see a blank or error frame.
- Mixed content. If your dashboard is served over HTTPS and the URL is HTTP, browsers will block the load. Use HTTPS URLs wherever possible.
- Login walls. Iframes do not share your session with the embedded site. Pages that require authentication will show a login screen, not the content.
Troubleshooting
| Symptom | Try |
|---|
| Blank frame | Open the URL directly in a browser tab; check the Network panel for X-Frame-Options or CSP headers. |
| ”Refused to connect” error | The site blocks embedding. Consider linking to it via the Quick Links widget instead, or embedding a public export (e.g. a published Grafana snapshot). |
| Secure-site content not loading | Switch the URL to https://. |
