Comments (9)
Yes, this is an intended behavior for security reasons. I'll change the title of this to opting in to allow this.
from webcalendar.
That would be a great option to include, especially for us legacy users that are embedding the calendars in other webpages.
I am unfamiliar with php but if you could point me in the right direction, I will see what I can come up with.
from webcalendar.
Version 1.9.8 now has an option in Admin Setting under "Site security" where you can set the CSP value to allow use of iframes.
from webcalendar.
I just tried to upgrade to v1.9.8 and everything went smooth except I still cannot get the calendar to display in an iframe. After I ran the installation wizard, I logged in to the calendar via the direct URL and selected to allow any site to iframe and disabled the origin checking. When trying to view the embedded calendar nothing is displayed and the following is displayed in the console: {IntranetURL} blocked a frame with origin {webCalURL} from accessing a cross-origin frame.
Upon regressing to v1.3.0 the iframe properly displays the calendar again.
from webcalendar.
Can you the Chrome developer tools to inspect the HTTP response header? I'm curious if it is sending the correct headers.
from webcalendar.
from webcalendar.
Forgot about that bit of code... Hopefully latest commit will fix this: 5e5d0e5
from webcalendar.
I can confirm that this change does work. I made the modifications and the calendar is now working in an iframe. Thank you!
from webcalendar.
Glad to hear it's working 👍
from webcalendar.
Related Issues (20)
- send-reminders.php - Warnings on a fresh install
- Error 500 on Save HOT 1
- Error when switching from PHP 7.4 to PHP 8.0 HOT 1
- Invalid referring URL message HOT 1
- Installing webcalendar-master 1.9.1 on php8.1.12/Apache 2.4.56-1/MariaDB 10.4.26-1 HOT 2
- Warning: Undefined variable $page_id HOT 2
- Not authorized to edit Layers even as Admin HOT 19
- Not able to send with SMTP
- LDAP and user groups
- "Test Settings" returns the http code 500 when SQLite3 is chosen
- Question about two vulnerabilities in WebCalendar v1.2.7 HOT 1
- [BUG] Timed event dropdown not functioning correctly HOT 4
- Fatel error in webcalendar/view_entry.php?id= HOT 1
- Cannot export entries HOT 1
- Installation worked but it is not possible to open Events Details HOT 4
- Will webcalendar work with php ver 8.2 HOT 2
- Installation Issue HOT 2
- iframe will not display calendar
- edit_entry.php: to much time, not enough dates for tasks
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from webcalendar.