Questions tagged [x-frame-options]

The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a <frame>, <iframe> or <object> . Sites can use this to avoid clickjacking attacks, by ensuring that their content is not embedded into other sites.

Filter by
Sorted by
Tagged with
2
votes
2answers
1k views

Salesforce OAuth Connected App in Url Tab

I've got a connected app that handles login through the Oauth 2.0 webserver flow, and was originally designed to run in the web browser outside of the salesforce ui. We still want it to be able to ...
1
vote
1answer
3k views

Refused to display 'https://www.salesforce.com/de/' in a frame because it set 'X-Frame-Options' to 'sameorigin'

I created VF page (or also to see the VF page inside a lightning component). I added an apex iframe with src="https://www.salesforce.com/de/" (or any other source) from salesforce apex iframe guide....
1
vote
0answers
100 views

Oauth xframe option issue on canvas

When we do oauth flow on canvas , we following error in browser console. setup/secur/RemoteAccessAuthorizationPage.apexp?source= If I click on the url it works fine. It should work seamlessly in ...
0
votes
1answer
2k views

'X-Frame-Options' to 'sameorigin'

I have a Visualforce with embeded page from the Moodle site but in the Production I got this error in console log Refused to display 'https://learn.psa.org.au/enrol/index.php?id=2848' in a frame ...
0
votes
1answer
29 views

Iframe third party site is not allowed and throwing error X-Frame-Options' to 'deny'

I want to iframe a URL in the salesforce vf page or aura component. I have added the URL in remote site settings and CSP Trusted sites. When I access the component it is throwing an error Refused to ...
0
votes
0answers
19 views

Embedded Login - won't display 'Allow Access' modal page during login ldue to X-Frame-Options set to deny

Implementing Embedded Login using Customer Community, have Login meta added to web page, when user enters credentials and clicks login, browser error... Refused to display 'https://embedlogin-devtest....