When your website is rejected for having an iframe, the first thing you should do is check if it should be there. Many times websites get hacked and a hidden iframe is added into the website, without anyone noticing. The StartXchange Scanner can detect this, and will prevent these from coming in.

To check, view the page that was rejected and view the source. (View->Page Source). Then search for iframe. If you see one come up, and you know the website is a clean website, feel free to contact support about adding the website to the whitelist. We'll check it out and see if it is clean, and let it in if it passes hand inspection!

If you can't find the iframe in the source, contact the website owner and let them know the scanner found an iframe. Let them know it can detect hidden iframes in encoded javascript, and ask them to check that it's ok. If they say everything is as it should be, try contacting support.

Please note that we have every right to not whitelist a site. If we aren't sure that the iframe is good, then we won't let it in. The scanner in some rare cases can generate a false positive, but if the website owner says there is no iframe, and the scanner says there is, then usually that means one was put in without them knowing, and is hidden in some encoded javascript (which can be hard to find if you don't know what to look for). If that's the case, we can provide help in showing you where the code is so you can remove it.