Mixed content blocked in iframe

[Teemu Sumi, modificado 6 Anos atrás.]

Hello!

I am running liferay-portal-tomcat-6.2-ce-ga3 bundle in http://localhost:8088. When I try iframe portlet with some public external URL, only http URL are shown. https URL is not shown.

Chrome developer tools console output:
Refused to display 'https://www.xxx.yyy' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

I tried these in portal-ext.properties:
http.header.secure.x.frame.options=false
http.header.secure.x.frame.options.1=someurl

But http URLs are shown without those anyway.

So my question is:

Does Iframe portlet handle mixed content?

Thanks!

[Teemu Sumi, modificado 6 Anos atrás.]

It looks like there's a problem with https, if there is some redirect.

[Andrew Jardine, modificado 6 Anos atrás.]

Hi Teemu,

Which version of Liferay are you using?

[Teemu Sumi, modificado 6 Anos atrás.]

Liferay 6.2.2 plus 30 custom portlets. So upgrading is not easy.

[Olaf Kock, modificado 6 Anos atrás.]

Teemu Sumi:

Chrome developer tools console output:
Refused to display 'https://www.xxx.yyy' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

...

So my question is:
Does Iframe portlet handle mixed content?

The IFrame portlet allows this, no problem. But the embedded website might not allow it. It seems that your examples use http sites that allow embedding and https sites that don't. But it's got nothing to do with http or https.

[Teemu Sumi, modificado 6 Anos atrás.]

Thanks for the comments.