Expand my Community achievements bar.

Dive into Adobe Summit 2024! Explore curated list of AEM sessions & labs, register, connect with experts, ask questions, engage, and share insights. Don't miss the excitement.
SOLVED

HTML - Embed Iframe

Avatar

Level 5

The below script is not working on embed component. 

 

<iframe src="https://www.w3schools.com" title="W3Schools Free Online Web Tutorials">
</iframe>

 

Topics

Topics help categorize Community content and increase your ability to discover relevant content.

6.5
1 Accepted Solution

Avatar

Correct answer by
Community Advisor

Hi @AEMLearner-1989 ,

This issue you are facing, It seems due to XSS protection config, that is based on OWASP recommnedation.

So to enable it you need to enable the iframe in the config file. but that is not recommended.

 

OR

ELse you can use some jquery or vanila js to implement such thing using client libs.

 

Hope this will help

Umesh Thakur

View solution in original post

3 Replies

Avatar

Correct answer by
Community Advisor

Hi @AEMLearner-1989 ,

This issue you are facing, It seems due to XSS protection config, that is based on OWASP recommnedation.

So to enable it you need to enable the iframe in the config file. but that is not recommended.

 

OR

ELse you can use some jquery or vanila js to implement such thing using client libs.

 

Hope this will help

Umesh Thakur

Avatar

Community Advisor

@AEMLearner-1989, can you please share the error message from your console please?

Avatar

Community Advisor

Hi @AEMLearner-1989,

 

You cant show many websites in an iFrame. Reason: An "X-Frame-Options: SAMEORIGIN" response header is set. which prevents the browser from displaying iFrames that are not hosted on the same domain [like parent page]. Its a security feature to prevent click-jacking.

 

C1.PNG

 

Hope this helps.

 

Thanks,

Kiran Vedantam.