#content-security-policy

#content-security-policy

You can technically grab an element's source code by opening a webpage in an iframe and attaching a click event to it, but many pages enforce their own Content Security Policies, which often block this. When a site blocks itself from being framed for security reasons, trying to extract data through JavaScript can be thwarted by same-origin policy restrictions.