X-frame error: need to know web pages requests source address

  • 1
  • Problem
  • Updated 2 years ago
  • Solved
Archived and Closed

This conversation is no longer open for comments or replies and is no longer visible to community members.

Hello,

I'm trying to display two pages that originally couldn't be able to be included in an i-frame, because of their X-frame settings. I found for both of them ways to change the X-frame settings.

The property to be set on each of them (that then is pushed as a header in the response) is in the following format:
X-frame-options: ALLOW-FROM THE_URI_TO_ALLOW

I've tried to look at the apps log to see where the requests are maid from the webpage display plugin. I see the following: https://s3.amazonaws.com

So, I tried to modify the option accordingly:

X-frame-options: https://s3.amazonaws.com

I see the header arriving to the browser, but I still get the same error when I try to add webpage widget (The owner of the Web Page at the URL provided does not allow the page to be embedded within an iFrame. If possible, please contact the Web Page owner to discuss X-Frame-Options).

Any help or clarification on the address to use would be really appreciated.

Thank you, best,

-Luca
Photo of ONOS Project

ONOS Project

  • 92 Points 75 badge 2x thumb

Posted 2 years ago

  • 1
Photo of ONOS Project

ONOS Project

  • 92 Points 75 badge 2x thumb
Any thought guys? Can't believe I'm the first one here with this issue :P

Any help would be really appreciated!

Thanks again,

-Lucaa
Photo of Darius - PRODO.us

Darius - PRODO.us, Champion

  • 26,850 Points 20k badge 2x thumb
No, you are not the first, but it is also not very common :P I suppose most of them just gave up... hard to tell. But please let us know if you figured this one out.
Photo of Stuart Lees

Stuart Lees, Employee

  • 586 Points 500 badge 2x thumb
Hi Luca,

It looks like you missed the ALLOW-FROM directive in your header response. It should be:

X-Frame-Options: ALLOW-FROM https://s3.amazonaws.com 

Let us know if this resolves the problem. 

Thanks,
Stu
Photo of ONOS Project

ONOS Project

  • 92 Points 75 badge 2x thumb
Stuart,

Thanks. I'd like to confirm that this (already tried by myself at the beginning) indeed solves the issue.
My problem was that the Risevision platform keeps reporting the error "The owner of the Web Page at the URL provided does not allow the page to be embedded within an iFrame. If possible, please contact the Web Page owner to discuss X-Frame-Options." even if everything works on the screen.

This should be probably fixed.

Anyway, as I said it works on the screen. So, so far so good ;)

Thanks,

-Luca
Photo of Robb

Robb, Official Rep

  • 76,676 Points 50k badge 2x thumb
Thanks for letting us know Luca! I have logged a defect for that incorrect message, which you can follow here.