• Login
  • Register

DNN Forums

A community discussion page. We're starting from scratch, so...let's get the party started!

iFrames suddenly quit working

You are not authorized to post a reply.
Sort:
Page 1 of 512345 > >>


Basic Member


Posts:31
Basic Member

    Hi -

    I just had our intranet site suddenly stop displaying content from our internet site through iFrames. Both sites are DNN.

    The intranet site (which has the iFrames) web.config does have an tag with X-Frame Options set to "Same Origin"  - but this hasn't been changed any time recently. However, the iFrames were working up until last week and suddenly stopped. I cant tell why this has changed.

    The internet site (which contains the content referenced in the iFrames) doesnt have any X-frame-options or CSP setting in it's web.config.

    There is one exception (an iFrame which is still working) . In this case, the iFrame is pulling in content from a page which is not in DNN. It's on the same IIS website, but displaying straight html content (through a virtual directory). This is the only iFrame which is still working. All the iFrames which pull in content from DNN internet website have stopped working.

    Any insight into why this is happening?

    Thanks

    Tom



    Advanced Member


    Posts:194
    Advanced Member

      As "suddenly" usually means "after a change" ... was there a change to the site.. Any idea what changed?
      Joe Craig DNN MVP Patapsco Research Group


      Basic Member


      Posts:31
      Basic Member

        Thanks for your reply - I am trying to find what might have changed, but I don't see anything that seems relevant.

        Do you know if there is anything I should be looking for in the web.config or elsewhere?

        I see "Refused to display 'https://www.santacruzcounty.us/' in a frame because it set 'X-Frame-Options' to 'sameorigin'."
        in the Console which tells me the references (internet) site has a setting somewhere for x-frame origins. It's not in the web.config or in IIS (that I can see).
        Do you know where else I could look?

        Thanks

        Tom


        Advanced Member


        Posts:194
        Advanced Member

          From: https://stackoverflow.com/questions/41522652/refused-to-display-url-in-a-frame-because-it-set-x-frame-options-to-sameori?rq=1

          You cannot display a lot of websites inside an iFrame. Reason being that they send an "X-Frame-Options: SAMEORIGIN" response header. This option prevents the browser from displaying iFrames that are not hosted on the same domain as the parent page. This is a security feature to prevent click-jacking. Some details at How to show google.com in an iframThate?

          That last sentence points to:  https://stackoverflow.com/questions/8700636/how-to-show-google-com-in-an-iframe

           

          It seems like the change you are looking for occured on the source of what you want to iframe ...

          Joe Craig DNN MVP Patapsco Research Group


          Basic Member


          Posts:31
          Basic Member

            Thanks, Joe - I saw that too.

            Do you know where I would look on the source of the reference site to find where the 'X-frame-options" is being set?

            Tom
            You are not authorized to post a reply.
            Page 1 of 512345 > >>

            These Forums are dedicated to discussion of DNN Platform.

            For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

            1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
            2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
            3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
            4. No Flaming or Trolling.
            5. No Profanity, Racism, or Prejudice.
            6. Site Moderators have the final word on approving / removing a thread or post or comment.
            7. English language posting only, please.

            Would you like to help us?

            Awesome! Simply post in the forums using the link below and we'll get you started.

            Get Involved