I am trying to build a simple visualforce page with an iframe.
<apex:page> <apex:iframe src="http://my.website.com" scrolling="true" id="theIframe"/> </apex:page>
- ("my.website.com" is a placeholder name for this question)
i have added the url to the "remote site settings" and checked the "Disable Protocol Security" box. When trying to preview the page i get a blank page and the following errors:
Content Security Policy: Referrer Directive ‘origin-when-cross-origin’ has been deprecated. Please use the Referrer-Policy header instead.
Blocked loading mixed active content “http://my.website.com/”
Content Security Policy: Not supporting directive ‘reflected-xss’. Directive and values will be ignored.
Can anyone shed some light on what i need to do next in order to get the iframe to display in my page?