iframe - enable cors on iis - load denied by x-frame-options: does not permit cross-origin framing -
there several questions couldn't right answer yet. give short summary:
company has website iframe in it. company b gives url iframe. user uses application company b , settings user chooses sets url delivered iframe company a.
however, framing not working yet because of x-frame-options. error message following:
load denied x-frame-options: http://www.myurl.com:8088/mypath?panel=panel&user=username not permit cross-origin framing.
i added
<httpprotocol> <customheaders> <add name="access-control-allow-origin" value="*" /> </customheaders> </httpprotocol>
to web.config , tried add
<handlers> <remove name="options"/> </handlers>
without success.
i got suggestions this , this website add cors support on iis. mentioned above, without success. i'm not in web development or iis maybe question sounds stupid you: company has enable cors or company b? or both? , how? suggestions got google didn't yet.
suggestions appreciated.
that error message isn’t related access-control-allow-origin
header nor options
handling, it’s expected changes described in question wouldn’t have effect.
the cause instead is, http://www.myurl.com:8088
server’s sending x-frame-options
response header in responses requests /mypath
. if don’t want server that, need figure out part of server code causing x-frame-options
response header added, , remove code.
Comments
Post a Comment