Page 1 of 1

External iFrame greyed out with last Chrome (and Safari)

Posted: Mon Sep 07, 2020 5:26 pm
by Klug
Hello.

It looks like this issue but the other way round: viewtopic.php?f=15&p=298730

We've been using a zimlet that displays an external page for years (hosted antispam control panel) using a new tab in ZCS web interface and an iFrame within the tab.

Since last Chrome, users can't get their control panel, the iframe is greyed out and Chrome says the website (control panel FQDN) does not allow to connect.
Obvisouly, if you get the iFrame URL in another Chromium tab, it works.
The control panel is hosted on another domain.

Is there anything we could add/modify to the iFrame creation call to work around this "for security sake" issue?

It might be "not that new" (starting with Chrome 80) but customers only experienced it last week.

Re: External iFrame greyed out with last Chrome (and Safari)

Posted: Mon Sep 07, 2020 5:31 pm
by Klug
Client side work-around (within Chrome) is : disabling "same-site-by-default-cookies" & "cookies-without-same-site-must-be-secure" in chrome://flags.