Admin Tools

#32152 Site refused to connect from iframe wrapper

Posted in ‘Admin Tools for Joomla! 4 & 5’

This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version

n/a

PHP version

n/a

Admin Tools version

n/a

Latest post by djc on Wednesday, 18 December 2019 09:41 CST

Tuesday, 17 December 2019 16:09 CST

djc

I am trying to display a page from one of my sites to another and I keep getting a "refused to connect" error.
I have no idea why that is.

Is it possible that some setting I have in Admin Tools is causing this? I have turned off "Protect against clickjacking" in ,htaccess Maker, with no change.

Any other ideas?

Thanks,
Dom

Wednesday, 18 December 2019 01:29 CST

nicholas

This is exactly how things should be if you are using the default .htaccess Maker configuration.

Disabling “Protect against clickjacking” is one thing that you need to disable since it’s the obvious roadblock. However, it’s not the only one.

By default “Enable Cross-Origin Resource Sharing (CORS)” is set to Yes. This prevents a browser showing a page on a domain different than yours to include any content, including an entire page, from your own domain. You need to disable this.

Depending on what the page does you may also need to set “Disable HTTP methods TRACE and TRACK (protect against XST)” to No as well. First try without disabling it.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Wednesday, 18 December 2019 09:41 CST

djc

Thanks, Nicholas!

Turns out I had to disable "Protect against clickjacking" on both sites....I guess I did not really understand how it worked.

I appreciate how you take the time to explain your answers so that we become better informed.

Thank you also for your great products!

Regards,
Dom

Support