Mixed content blocked in iframe

[Teemu Sumi, modifié il y a 6 années.]

Hello!

I am running liferay-portal-tomcat-6.2-ce-ga3 bundle in http://localhost:8088. When I try iframe portlet with some public external URL, only http URL are shown. https URL is not shown.

Chrome developer tools console output:
Refused to display 'https://www.xxx.yyy' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

I tried these in portal-ext.properties:
http.header.secure.x.frame.options=false
http.header.secure.x.frame.options.1=someurl

But http URLs are shown without those anyway.

So my question is:

Does Iframe portlet handle mixed content?

Thanks!

[Teemu Sumi, modifié il y a 6 années.]

It looks like there's a problem with https, if there is some redirect.

[Andrew Jardine, modifié il y a 6 années.]

Hi Teemu,

Which version of Liferay are you using?

[Teemu Sumi, modifié il y a 6 années.]

Liferay 6.2.2 plus 30 custom portlets. So upgrading is not easy.

[Olaf Kock, modifié il y a 6 années.]

Teemu Sumi:

Chrome developer tools console output:
Refused to display 'https://www.xxx.yyy' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

...

So my question is:
Does Iframe portlet handle mixed content?

The IFrame portlet allows this, no problem. But the embedded website might not allow it. It seems that your examples use http sites that allow embedding and https sites that don't. But it's got nothing to do with http or https.

[Teemu Sumi, modifié il y a 6 années.]

Thanks for the comments.