Contents
Why is X-Frame-Options not working in Lightning container?
When using the Lightning container component to display a react application I am receiving an error: Refused to display ‘…’ in a frame because it set ‘X-Frame-Options’ to ‘sameorigin’. Can you give me more information about your app, please?
Why is my website throwing a 403 Forbidden error?
Throwing a 403 forbidden error is your website’s way of stating that you don’t have enough permissions to proceed further. This error is basically due to: Incorrect file or folder permissions Incorrect settings in the .htaccess file
What does sfdciframeorigin do in Lightning container?
The sfdcIFrameOrigin parameter is supposed to allow cross-origin framing, but this doesn’t appear to be working. I’ll open an issue internally. Is this related to the “clickjack protection” in Session settings? It sounds like that changes the X-Frame-Options header to allow displaying Iframe content.
Why is load denied by X-Frame-Options?
Load denied by X-Frame-Options: https://mydomain–c.container.lightning.com/lcc/1508427296000/ReactPie/index.html?sfdcIFrameOrigin=https%3A%2F%2Fmydomain.lightning.force.com does not permit cross-origin framing. Where mydomain is my domain This sounds like a problem on the Salesforce side.
Why does Apache refuse to display in a frame?
They have set the header to SAMEORIGIN in this case, which means that they have disallowed loading of the resource in an iframe outside of their domain. So this iframe is not able to display cross domain For this purpose you need to match the location in your apache or any other service you are using
What can the Lightning container component be used for?
The lightning:container component allows you to host content developed with a third-party framework within a Lightning component. The content is uploaded as a static resource, and hosted in an iFrame. The lightning:container component can be used for single-page applications only.