I attempted a Salesforce Embedded Login test by deploying the Heroku "embedded-login-example" github project (https://github.com/salesforceidentity/embedded-login-example/blob/168664fb18f944f13bf0421af0dff9df4925a5dd/README.md)

The deployed app works successfully in Edge, Firefox, Safari, and Chrome incognito, but the Login button does not appear in Chrome proper (when NOT in incognito). I am on a Mac, and a colleague was able to reproduce the issue on a Windows machine.

The error message I am seeing in the chrome proper browser is as follows: Refused to display 'https://{communityurl}/servlet/servlet.loginwidgetcontroller?type=javascript_xauth' in a frame because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'none'".

Is this a Chrome issue, a Salesforce issue, or an issue with the Heroku app configuration? And most importantly, is it fixable or will embedded login just not work in Chrome?

My version of Chrome: Version 78.0.3904.108 (Official Build) (64-bit)

Thank you in advance!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.