Welcome to the LimeSurvey Community Forum

Ask the community, share ideas, and connect with other LimeSurvey users!

Problema ao tentar exibir iframe!

reckVCM
Topic Author
Offline
New Member

More

2 years 11 months ago #252694 by reckVCM

Problema ao tentar exibir iframe! was created by reckVCM

Boa tarde!

Guys, I'm trying to display an iframe on a form, but it doesn't work at all! When I exit the iframe it works.

In the attachment I added the error and the message is simply this:

What did I do to try to resolve it.

- I disabled XSS
- Allow iframe for origin only - I have already set the following in the server's .htaccess:

<IfModule mod_headers.c>
Header set X-Frame-Options "ALLOW-FROM *"
</IfModule>

What do I need to do to make IFRAME work?

...1-27184440.png

Please Log in to join the conversation.

DenisChenu
Offline
LimeSurvey Community Team & Official Partner

More

2 years 11 months ago #252699 by DenisChenu

Replied by DenisChenu on topic Problema ao tentar exibir iframe!

Did you try

1. www.limesurvey.org/manual/Global_settings#Security
2. www.limesurvey.org/manual/index.php?titl...Validation_in_iFrame
?

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member. - Professional support - Plugins, theme and development .
I don't answer to private message.

Please Log in to join the conversation.

reckVCM
Topic Author
Offline
New Member

More

2 years 11 months ago - 2 years 11 months ago #252708 by reckVCM

Replied by reckVCM on topic Problema ao tentar exibir iframe!

Thanks for answering!

This way?

Last edit: 2 years 11 months ago by reckVCM.

Please Log in to join the conversation.

DenisChenu
Offline
LimeSurvey Community Team & Official Partner

More

2 years 11 months ago #252711 by DenisChenu

Replied by DenisChenu on topic Problema ao tentar exibir iframe!

Read all please : csrf needed too

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member. - Professional support - Plugins, theme and development .
I don't answer to private message.

Please Log in to join the conversation.

reckVCM
Topic Author
Offline
New Member

More

2 years 11 months ago #252712 by reckVCM

Replied by reckVCM on topic Problema ao tentar exibir iframe!

But I already put the CSRF with the samesite and secure

Please Log in to join the conversation.

DenisChenu
Offline
LimeSurvey Community Team & Official Partner

More

2 years 11 months ago - 2 years 11 months ago #252763 by DenisChenu

Replied by DenisChenu on topic Problema ao tentar exibir iframe!

samesite for cookieParams and

Code:

sameSite

for csrfCookie
www.sondages.pro/iframe/

Code:

        'session' => array (
            'sessionName' => "SPDemo",
            //~ 'class' => 'application.core.web.DbHttpSession',
            //~ 'connectionID' => 'db',
            //~ 'sessionTableName' => '{{sessions}}',
            'cookieParams' => array(
                'secure' => true,
                'httponly' => true,
                'samesite' => 'None',
            ),
        ),
        'request' => array(
            'enableCsrfValidation'=>true,
            'csrfCookie' => array(
                'sameSite' => 'None',
                'secure' => true,
            ),
        ),

And Please : don't open an issue about this, LimeSurey GMBH want to delete this part from manual.

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member. - Professional support - Plugins, theme and development .
I don't answer to private message.

Last edit: 2 years 11 months ago by DenisChenu.

Please Log in to join the conversation.

DenisChenu
Offline
LimeSurvey Community Team & Official Partner

More

2 years 11 months ago #252766 by DenisChenu

Replied by DenisChenu on topic Problema ao tentar exibir iframe!

You need php7.4 and up too

github.com/LimeSurvey/LimeSurvey/blob/d7.../CHttpCookie.php#L85
github.com/LimeSurvey/LimeSurvey/blob/d7...HttpSession.php#L256
github.com/LimeSurvey/LimeSurvey/blob/d7...ttpRequest.php#L1579

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member. - Professional support - Plugins, theme and development .
I don't answer to private message.

Please Log in to join the conversation.