Forum Discussion

ratnesh's avatar
ratnesh
Lithium Alumni (Retired)
12 years ago

Problem in using studio page as an iframe on other domain

The deisgn of the widget is such that, we pull a studio page on other domain of customer in an iframe . Recenlty we started to get an error on customer's stage environment as    Load denied by X-Fr...
  • stever's avatar
    stever
    12 years ago

    Hi Ratnesh,

     

    Looking at that page I do see the 

     X-Frame-Options:DENY

     header, so as currently configured, that page is not iframeable at all in a browser that honors that header.

     

    Looking at the configuration for the site, I do see a problem with the clickjacking prevention configurations.

     

    Please file a case with support to get this configuration issue resolved.

     

    Here is a general link for more info on clickjacking, for anyone who is not familiar with the general issue: wikipedia

     

        Regards,

            Steve

stever's avatar
stever
Lithium Alumni (Retired)

Hi Ratnesh,

 

Looking at that page I do see the 

 X-Frame-Options:DENY

 header, so as currently configured, that page is not iframeable at all in a browser that honors that header.

 

Looking at the configuration for the site, I do see a problem with the clickjacking prevention configurations.

 

Please file a case with support to get this configuration issue resolved.

 

Here is a general link for more info on clickjacking, for anyone who is not familiar with the general issue: wikipedia

 

    Regards,

        Steve

vishwajit_shind's avatar
vishwajit_shind
Expert
9 years ago

stever,

 

Continuation to the above question raise by ratnesh. What if the 

X-Frame-Options: SAMEORIGIN

Do we need to raise a case with support team to get this configuration issue resolved.

 

Can you please provide more details regarding this configurations. As we are not able to call the community page in the iframe of another domain.