How can I update a form's origin list to resolve CORS errors when embedding in an iframe?

n8n and Credential Settings

Based on the available n8n documentation, there isn’t an option in n8n or in the Form.io Trigger credentials to modify the X‑Frame‑Options header (or update the origin list) for a form. The header in question is set by the form provider (in this case, Form.io) and is not something configurable through n8n.

What You Can Do

• Check Form Provider Settings:
  You’ll need to refer directly to your form provider’s (e.g. Form.io) documentation or settings to see if there is an available option to update allowed origins for embedding. Some providers allow such customization through configuration options on your account or project.

• Server-Side Workaround:
  If the provider does not support modifying the X‑Frame‑Options header, consider using a server-side proxy or similar technique to serve the content without such restrictions. However, be mindful of security implications when using such workarounds.

For further details about Form.io, refer to their API documentation.

If your setup in n8n is working correctly when not embedded, then the issue lies on the form side, not within the n8n flow or credentials configuration.