A customer loads a subpage of my netlify site in their web app. They use <iframe src="https://myNetlifySite/subpage" style="width: 600px; height: 350px" frameborder="0" ></iframe> That works perfectly, but now they want to take a screenshot of a certain <div> of the subpage via a JS scri…

[image] Philipp: Is it immaterial? I’m not sure, you’d have to test, I just raised it as it’s something I spotted, and am just indicating that it may not make any difference. [image] Philipp: You also sent this link . There, it is without the double quotes Yep, to explain the access-co…

Thanks Nathan. In [[headers]] for = "/*" [headers.values] access-control-allow-origin = "*" is for = my subpage and access-control-allow-origin = the customer’s site?

@Philipp The documentation for the configuration file format is on the page linked, here: https://docs.netlify.com/routing/headers/#syntax-for-the-netlify-configuration-file The following keywords are available: for: the path or URL where the headers will be added. values: a map of values to a…

Thanks again Nathan. I will test it and let you know, if it works.

It did not work. They still get the CORS error. Here’s in more detail, what I did: We are talking about this site: https://externaltest.walterroller.de/UTFK_calculator It points to: https://externaltest.netlify.app/UTFK_calculator In the wwwroot folder I added a file netlify.toml with the conten…

@Philipp It’s probably immaterial, but the Netlify answer I linked had "*" not * as the value. If you’re trying to run JavaScript across the frame, then you’re probably running in to this https://stackoverflow.com/questions/25098021/securityerror-blocked-a-frame-with-origin-from-accessing-a-cross-…

Is it immaterial? You also sent this link . There, it is without the double quotes, but of course you define the syntax of your header. [image] nathanmartin: If you’re trying to run JavaScript across the frame, then you’re probably running in to this javascript - SecurityError: Blocked a frame…

Thanks again Nathan for your help. I will find a workaround… BR Philipp

CORS and iframe

Support

nathanmartin December 16, 2024, 8:51am 2

@Philipp You could try:
https://docs.netlify.com/routing/headers/

As per 3.2.1 here:
https://answers.netlify.com/t/support-guide-handling-cors-on-netlify/107739

Topic		Replies	Views
Handle CORS and allow assets to be loaded in externally hosted iframe Support cors	5	1752	September 16, 2023
Itch.io iframe CORS and SharedArrayBuffer headers not working Support netlify-newbie , cors , headers	1	314	April 26, 2024
Can`t put my site iframe on another sites Support headers	11	3275	February 22, 2023
Endless CORS frustration! "Access-Control-Allow-Origin: *" and still blocking XMLHttpRequest! Support cors , headers	5	7472	October 12, 2022
[Support Guide] Handling CORS on Netlify Support Guides support-guide	0	9049	December 1, 2023

CORS and iframe

Related topics