Mixed content blocked in iframe

[6年前 に Teemu Sumi によって更新されました。]

Hello!

I am running liferay-portal-tomcat-6.2-ce-ga3 bundle in http://localhost:8088. When I try iframe portlet with some public external URL, only http URL are shown. https URL is not shown.

Chrome developer tools console output:
Refused to display 'https://www.xxx.yyy' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

I tried these in portal-ext.properties:
http.header.secure.x.frame.options=false
http.header.secure.x.frame.options.1=someurl

But http URLs are shown without those anyway.

So my question is:

Does Iframe portlet handle mixed content?

Thanks!

[6年前 に Teemu Sumi によって更新されました。]

It looks like there's a problem with https, if there is some redirect.

[6年前 に Andrew Jardine によって更新されました。]

Hi Teemu,

Which version of Liferay are you using?

[6年前 に Teemu Sumi によって更新されました。]

Liferay 6.2.2 plus 30 custom portlets. So upgrading is not easy.

[6年前 に Olaf Kock によって更新されました。]

Teemu Sumi:

Chrome developer tools console output:
Refused to display 'https://www.xxx.yyy' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

...

So my question is:
Does Iframe portlet handle mixed content?

The IFrame portlet allows this, no problem. But the embedded website might not allow it. It seems that your examples use http sites that allow embedding and https sites that don't. But it's got nothing to do with http or https.

[6年前 に Teemu Sumi によって更新されました。]

Thanks for the comments.