Cannot embed a website in an iframe - HxGN SDx - Update 63 - Administration & Configuration

Administration and Configuration of HxGN SDx

Language
English
Product
HxGN SDx
Search by Category
Administration & Configuration
SmartPlant Foundation / SDx Version
10

Problem

You cannot embed in the Web Client as it is being prevented from being embedded in an iframe.

Reason

Some websites use specific HTTP headers, such as X-Frame-options and Content Security Policy (CSP), to prevent the website from being embedded in an iframe. These headers are important, as they are used to stop the website from an outside attack called click-jacking. For example, the website www.google.com prevents it from being embedded in an iframe.

Solution

Some applications will not allow a report to be embedded in an iframe by default, such as Power BI. However, the Power BI application and others offer an option allowing you to generate a link, which can be used to embed the content in an iframe. If you have access to modify the HTTP headers of a website, you can embed the website in an iframe for a specific domain.

If you modify the website so it can be embedded in an iframe for multiple domains, it will not be as secure.