topic Re: Ignore X-Frame-Options header from 3rd party application in ThingWorx Developers

Ignore X-Frame-Options header from 3rd party application

vdevarakonda — Thu, 17 Mar 2016 23:29:31 GMT

Hi,

I am very new to Thingworx and I am trying following:

1. I have created "Mashup1" with "Navigation" widget.

. For the "Navigation" widget, I set the

MashupName (property) --> "Mashup2".

2. I have created a second mashup "Mashup2" with "web frame" widget.

.For the "web frame" widget, I set the

url (property) --> 3rd party application url

When I run this, I get "Mashup1" and on click of "navigation button", I see the second "Mashup2", but the "3rd party application url" is not loading within "web frame" widget.

The error I see is,

Refused to display <3rd party app url> in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.

Is there any way, where I can omit or ignore the response headers in a "web frame" widget? Or, is there any way I can access some "web frame widget url" load event or something else, where I can delete the response header 'X-Frame-Options' from my 3rd party app response?

Any response is greatly appreciated.

Re: Ignore X-Frame-Options header from 3rd party application

preddy-2 — Fri, 18 Mar 2016 05:47:07 GMT

Hi,

Web frame widget uses HTML iframe. Some sites do not allow getting opened with in the frame.

You can think of using link widget for your purpose.

With B/R,

Praveen.B

Re: Ignore X-Frame-Options header from 3rd party application

vdevarakonda — Mon, 21 Mar 2016 17:56:41 GMT

Hi Praveen,

Link widget seems to work fine, but it's like opening 3rd party app in another window.

For our requirement, we have to open 3rd party app in a iFrame window and we should be able to pass some data/context back and forth from the parent window to the iFrame and iFrame to parent window.

Any suggestions, please?

Thanks,

Vasanthi

Re: Ignore X-Frame-Options header from 3rd party application

preddy-2 — Wed, 23 Mar 2016 08:05:29 GMT

Hi Vasanthi,

I don't think so (and I didn't find a way also), we can fit 3rd party app in iframe if provider is not allowing.

I think it is better to approach provider itself to find a way for that, if they are reachable.

With B/R,

Praveen.B