I want to iframe a URL in the salesforce vf page or aura component. I have added the URL in remote site settings and CSP Trusted sites. When I access the component it is throwing an error Refused to display 'URL' in a frame because it set 'X-Frame-Options' to 'deny'. I have unchecked "Enable clickjack protection for customer Visualforce pages with standard headers". Does anyone have a workaround?
This is frustrating as iframe is the most common use-case and salesforce should allow iframe to third-party sites if the customer has to invoke their own websites in salesforce.