Passing data from widget to iframe site without using query params

gobinda168
Tera Contributor

‎12-28-2022 05:24 AM

Can anyone please help me I want to send some sensitive information from widget to iframe site which in hosted on GCP bucket. Currently I am using query params to do so but I want a more secure way to pass that data. Window.postMessage not working since its not in same origin.

 <div class="iframeContainer" src='www.xyz.site' ng-show="c.iframeVisibility">
 

0 Helpfuls
  • 1,243 Views
3 REPLIES 3

Ct111
Tera Sage

‎12-28-2022 02:02 PM

Hello ,

 

You need to use  

X-Frame-Options: SAMEORIGIN (instance security hardening

 

for sending data securely via Iframes

 

For more information on this check this LINK:

 

0 Helpfuls

gobinda168
Tera Contributor

‎01-04-2023 05:14 AM

Screenshot 2023-01-04 at 6.42.35 PM.png

 

I tried the above mentioned solution but not working for me in All-> Content Management app is not there

is there any other way to do so?

0 Helpfuls

Maik Skoddow
Tera Patron
Tera Patron

‎01-04-2023 05:23 AM

To the best of my knowledge this is not possible. The website in your IFRAME don't it is embedded in another page. Thus, you have the same scenario as having opened that website in another browser tab. And the only way to pass data to such an external website is either adding query parameters to the URL or passing data via POST requests. But I don't know whether the last option would be possible for your IFRAME scenario.

Maik

0 Helpfuls