iframe - enable cors on iis - load denied by x-frame-options: does not permit cross-origin framing -


there several questions couldn't right answer yet. give short summary:

company has website iframe in it. company b gives url iframe. user uses application company b , settings user chooses sets url delivered iframe company a.

however, framing not working yet because of x-frame-options. error message following:

load denied x-frame-options: http://www.myurl.com:8088/mypath?panel=panel&user=username not permit cross-origin framing.

i added

<httpprotocol>     <customheaders>         <add name="access-control-allow-origin" value="*" />     </customheaders> </httpprotocol> 

to web.config , tried add

<handlers>       <remove name="options"/> </handlers> 

without success.

i got suggestions this , this website add cors support on iis. mentioned above, without success. i'm not in web development or iis maybe question sounds stupid you: company has enable cors or company b? or both? , how? suggestions got google didn't yet.

suggestions appreciated.

that error message isn’t related access-control-allow-origin header nor options handling, it’s expected changes described in question wouldn’t have effect.

the cause instead is, http://www.myurl.com:8088 server’s sending x-frame-options response header in responses requests /mypath. if don’t want server that, need figure out part of server code causing x-frame-options response header added, , remove code.


Comments

Popular posts from this blog

node.js - Node js - Trying to send POST request, but it is not loading javascript content -

javascript - Replicate keyboard event with html button -

javascript - Web audio api 5.1 surround example not working in firefox -