SAP Knowledge Base Article - Public

2674922 - Mashup Not Loading In UI Because X-Frame-Options Console Error

Symptom

Your mashup is not loading in the UI even though everything appears to be set correctly. You check the browser console and notice an error message: Refused to display 'http://insert-your-url-here.com' in a frame because it set 'X-Frame-Options' to 'deny'.

Environment

SAP Hybris Cloud For Customer

Cause

For a page to be rendered within a frame, it has to have the X-Frame-Options parameter set accordingly. e.g. If your source page was configured with the parameter 'Deny' it will never render in any frame.

There are three possible options for the X-Frame-Options:

X-Frame-Options: DENY
X-Frame-Options: SAMEORIGIN
X-Frame-Options: ALLOW-FROM https://example.com/

The compatibility of the parameters vary depending on the browser / system where your page is trying to be rendered.

Resolution

The page which you want to be displayed within the mashup frame has to have the correct parameter configured for the X-Frame-Options. You must check with the developer of the source page.

Keywords

Mashup; Display; Frame; X-Frame-Options; Deny; HTML; , KBA , x-frame , AP-RC-GEN-MSH , Mashups , Problem

Product

SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions