<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Embed mashup in iFrame in ThingWorx Developers</title>
    <link>https://www.ptcusercommunity.com/t5/ThingWorx-Developers/Embed-mashup-in-iFrame/m-p/739932#M53487</link>
    <description>&lt;P&gt;Hi &lt;a href="https://www.ptcusercommunity.com/t5/user/viewprofilepage/user-id/287626"&gt;@Ju&lt;/a&gt;&lt;/P&gt;

&lt;P&gt;&amp;nbsp;&lt;/P&gt;

&lt;P&gt;Did you get a chance to check the article previously provided?&amp;nbsp; If if helped to solve your issue, please mark the appropriate response as the Accepted Solution for the benefit of others with the same issue.&lt;/P&gt;

&lt;P&gt;&amp;nbsp;&lt;/P&gt;

&lt;P&gt;Regards.&lt;/P&gt;

&lt;P&gt;&amp;nbsp;&lt;/P&gt;

&lt;P&gt;--Sharon&lt;/P&gt;</description>
    <pubDate>Fri, 23 Jul 2021 18:58:01 GMT</pubDate>
    <dc:creator>slangley</dc:creator>
    <dc:date>2021-07-23T18:58:01Z</dc:date>
    <item>
      <title>Embed mashup in iFrame</title>
      <link>https://www.ptcusercommunity.com/t5/ThingWorx-Developers/Embed-mashup-in-iFrame/m-p/736135#M52958</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I want to embed in another website a mashup as iframe.&lt;/P&gt;
&lt;P&gt;I have done the configuration like explained in the help :&lt;/P&gt;
&lt;P&gt;&lt;A href="https://support.ptc.com/help/thingworx/platform/r9/en/index.html#page/ThingWorx%2FHelp%2FComposer%2FSecurity%2FAllowingEmbeddedMashupsiniFrames.html" target="_blank" rel="noopener"&gt;https://support.ptc.com/help/thingworx/platform/r9/en/index.html#page/ThingWorx%2FHelp%2FComposer%2FSecurity%2FAllowingEmbeddedMashupsiniFrames.html&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;In the filter "&lt;SPAN&gt;ClickjackFilterWhiteList"&lt;/SPAN&gt;, I have added domain : &lt;A href="http://aa.bb.fr" target="_blank" rel="noopener"&gt;http://aa.bb.fr&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;But it's not working...&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;With Postman, when I do a get on my url:&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;&lt;A href="http://xxx/Thingworx/Mashups/TEST_VIEW?appKey=xxx&amp;amp;x-thingworx-session=true" target="_blank" rel="noopener"&gt;http://xxx/Thingworx/Mashups/TEST_VIEW?appKey=xxx&amp;amp;x-thingworx-session=true&lt;/A&gt;&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;I can see the headers:&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Content-Security-Policy :&amp;nbsp;frame-src &lt;A href="http://aa.bb.fr" target="_blank" rel="noopener"&gt;http://aa.bb.fr&lt;/A&gt;&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Content-Security-Policy :&amp;nbsp;frame-ancestors &lt;A href="http://aa.bb.fr" target="_blank" rel="noopener"&gt;http://aa.bb.fr&lt;/A&gt;&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;X-Frame-Options : ALLOW-FROM &lt;A href="http://aa.bb.fr" target="_blank" rel="noopener"&gt;http://aa.bb.fr&lt;/A&gt;&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;So, I guess my config in web.xml is ok.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;In the browser, when I enter my url :&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;A href="http://xxx/Thingworx/Mashups/TEST_VIEW?appKey=xxx&amp;amp;x-thingworx-session=true" target="_blank" rel="noopener"&gt;http://xxx/Thingworx/Mashups/TEST_VIEW?appKey=xxx&amp;amp;x-thingworx-session=true&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;The page load but is redirect to url :&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;A href="http://xxx/Thingworx/Runtime/index.html#mashup=TEST_VIEW&amp;amp;appKey=xxx&amp;amp;x-thingworx-session=true" target="_blank" rel="noopener"&gt;http://xxx/Thingworx/Runtime/index.html#mashup=TEST_VIEW&amp;amp;appKey=xxx&amp;amp;x-thingworx-session=true&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;I can see in the console that CSP (content-security-policy) are not set here. Just the default :&lt;/SPAN&gt;&lt;/P&gt;
&lt;DIV class="header-name"&gt;&lt;STRONG&gt;Content-Security-Policy: frame-ancestors 'self'&lt;/STRONG&gt;&lt;/DIV&gt;
&lt;DIV class="header-name"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class="header-name"&gt;Any idea ? Thanks for help.&lt;/DIV&gt;</description>
      <pubDate>Wed, 30 Jun 2021 10:28:53 GMT</pubDate>
      <guid>https://www.ptcusercommunity.com/t5/ThingWorx-Developers/Embed-mashup-in-iFrame/m-p/736135#M52958</guid>
      <dc:creator>Ju</dc:creator>
      <dc:date>2021-06-30T10:28:53Z</dc:date>
    </item>
    <item>
      <title>Re: Embed mashup in iFrame</title>
      <link>https://www.ptcusercommunity.com/t5/ThingWorx-Developers/Embed-mashup-in-iFrame/m-p/738696#M53347</link>
      <description>&lt;P&gt;Hi &lt;a href="https://www.ptcusercommunity.com/t5/user/viewprofilepage/user-id/287626"&gt;@Ju&lt;/a&gt;&lt;/P&gt;

&lt;P&gt;&amp;nbsp;&lt;/P&gt;

&lt;P&gt;Here is an &lt;A href="https://www.ptc.com/en/support/article/CS322995?posno=4&amp;amp;q=iframe&amp;amp;DocumentType=Article&amp;amp;ProductFamily=ThingWorx&amp;amp;Language=en&amp;amp;source=search" target="_blank"&gt;article&lt;/A&gt; that may apply to your situation.&amp;nbsp; Please check it out and let us know if you still have issues.&lt;/P&gt;

&lt;P&gt;&amp;nbsp;&lt;/P&gt;

&lt;P&gt;Regards.&lt;/P&gt;

&lt;P&gt;&amp;nbsp;&lt;/P&gt;

&lt;P&gt;--Sharon&lt;/P&gt;

&lt;P&gt;&amp;nbsp;&lt;/P&gt;

&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 15 Jul 2021 19:39:26 GMT</pubDate>
      <guid>https://www.ptcusercommunity.com/t5/ThingWorx-Developers/Embed-mashup-in-iFrame/m-p/738696#M53347</guid>
      <dc:creator>slangley</dc:creator>
      <dc:date>2021-07-15T19:39:26Z</dc:date>
    </item>
    <item>
      <title>Re: Embed mashup in iFrame</title>
      <link>https://www.ptcusercommunity.com/t5/ThingWorx-Developers/Embed-mashup-in-iFrame/m-p/738773#M53369</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;
&lt;P&gt;thanks for the link. We did several tests but not this one.&lt;/P&gt;
&lt;P&gt;The project is paused but I will try to do this test later.&lt;/P&gt;</description>
      <pubDate>Fri, 16 Jul 2021 07:44:54 GMT</pubDate>
      <guid>https://www.ptcusercommunity.com/t5/ThingWorx-Developers/Embed-mashup-in-iFrame/m-p/738773#M53369</guid>
      <dc:creator>Ju</dc:creator>
      <dc:date>2021-07-16T07:44:54Z</dc:date>
    </item>
    <item>
      <title>Re: Embed mashup in iFrame</title>
      <link>https://www.ptcusercommunity.com/t5/ThingWorx-Developers/Embed-mashup-in-iFrame/m-p/739932#M53487</link>
      <description>&lt;P&gt;Hi &lt;a href="https://www.ptcusercommunity.com/t5/user/viewprofilepage/user-id/287626"&gt;@Ju&lt;/a&gt;&lt;/P&gt;

&lt;P&gt;&amp;nbsp;&lt;/P&gt;

&lt;P&gt;Did you get a chance to check the article previously provided?&amp;nbsp; If if helped to solve your issue, please mark the appropriate response as the Accepted Solution for the benefit of others with the same issue.&lt;/P&gt;

&lt;P&gt;&amp;nbsp;&lt;/P&gt;

&lt;P&gt;Regards.&lt;/P&gt;

&lt;P&gt;&amp;nbsp;&lt;/P&gt;

&lt;P&gt;--Sharon&lt;/P&gt;</description>
      <pubDate>Fri, 23 Jul 2021 18:58:01 GMT</pubDate>
      <guid>https://www.ptcusercommunity.com/t5/ThingWorx-Developers/Embed-mashup-in-iFrame/m-p/739932#M53487</guid>
      <dc:creator>slangley</dc:creator>
      <dc:date>2021-07-23T18:58:01Z</dc:date>
    </item>
    <item>
      <title>Re: Embed mashup in iFrame</title>
      <link>https://www.ptcusercommunity.com/t5/ThingWorx-Developers/Embed-mashup-in-iFrame/m-p/740459#M53543</link>
      <description>&lt;P&gt;For information,&amp;nbsp;a colleague tried it, it doesn't work.&lt;/P&gt;
&lt;P&gt;Regards&lt;/P&gt;</description>
      <pubDate>Tue, 27 Jul 2021 08:41:35 GMT</pubDate>
      <guid>https://www.ptcusercommunity.com/t5/ThingWorx-Developers/Embed-mashup-in-iFrame/m-p/740459#M53543</guid>
      <dc:creator>Ju</dc:creator>
      <dc:date>2021-07-27T08:41:35Z</dc:date>
    </item>
    <item>
      <title>Re: Embed mashup in iFrame</title>
      <link>https://www.ptcusercommunity.com/t5/ThingWorx-Developers/Embed-mashup-in-iFrame/m-p/740629#M53580</link>
      <description>&lt;P&gt;Hi &lt;a href="https://www.ptcusercommunity.com/t5/user/viewprofilepage/user-id/287626"&gt;@Ju&lt;/a&gt;&lt;/P&gt;

&lt;P&gt;&amp;nbsp;&lt;/P&gt;

&lt;P&gt;Are you getting any errors?&amp;nbsp; Have you tried running Dev tools (F12) in Chrome to track down the cause of the issue?&lt;/P&gt;

&lt;P&gt;&amp;nbsp;&lt;/P&gt;

&lt;P&gt;Regards.&lt;/P&gt;

&lt;P&gt;&amp;nbsp;&lt;/P&gt;

&lt;P&gt;--Sharon&lt;/P&gt;</description>
      <pubDate>Tue, 27 Jul 2021 19:44:24 GMT</pubDate>
      <guid>https://www.ptcusercommunity.com/t5/ThingWorx-Developers/Embed-mashup-in-iFrame/m-p/740629#M53580</guid>
      <dc:creator>slangley</dc:creator>
      <dc:date>2021-07-27T19:44:24Z</dc:date>
    </item>
  </channel>
</rss>

