logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Apache View previous topic :: View next topic
Reply to topic   Topic: Stealth forwarding iframe does not work properly.
Author
balc



Joined: 31 Oct 2014
Posts: 2
Location: Amsterdam
PostPosted: Fri 31 Oct '14 16:29    Post subject: Stealth forwarding iframe does not work properly. Reply with quote
Hi,
I have a website on domain x like https://example.com. One of our customers want to use their own domain name in the address bar and redirect to our web application. In the control panel of the customers website, we can forward the site to our domain without issues (stealth forwarding). After that, we are able to see the site and navigate to some options. But there are some issues/limitations. I cannot open some links, or click on tabs. The login feature works for chrome but not for internet explorer. Is this due the jump of http to https within an iframe? Or is it related to CORS? I have a Windows 2008 R2 server with Apache, which is the frond-end for the tomcat instances. "Tomcat Apache" serves our Java-based web application (mod_jk binded)

How can i fix this issue?

Any idea is appreciated.
Back to top
balc



Joined: 31 Oct 2014
Posts: 2
Location: Amsterdam
PostPosted: Sat 01 Nov '14 14:36    Post subject: Reply with quote
After research i get the following error message:

Refused to display 'https://subdomain.domain.com' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.

Any idea?

What is the best way to enable only one site to embed in iframe and deny all the other sites?

Or should i create a subdomain on my own environment like:

https://customername.domain.com

How to realize this? And what are the settings
Back to top
James Blond
Moderator


Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg
PostPosted: Wed 05 Nov '14 11:08    Post subject: Reply with quote
Well in the underlying page you have to set a

Code:

Header always append X-Frame-Options ALLOW-FROM example.com


See https://developer.mozilla.org/en-US/docs/Web/HTTP/X-Frame-Options
Back to top


Reply to topic   Topic: Stealth forwarding iframe does not work properly. View previous topic :: View next topic
Post new topic   Forum Index -> Apache