I built a chatbot with N8N. I want to embed it on my own website and prevent other websites embedding it.
I set up CORS both inside N8N and on Cloudron, but I can still embed on W3school.
Did I make any mistake?
Are the CSP headers set as you expect them if you take a look at the request headers? Also double check them alongside the warnings in the browser console in case there is some typo and your browser thus ignores them.