external web application in cisco finesse

[Lazar Obradovic]

Hi guys,

we are trying to incorporate external web application into cisco finesse desktop by implementing simple gadget  with “iframe”.

However “iframe” remains blank (source is not rendered, just empty body, see attachment).

Does anyone have an idea where to look for problem?

Thanks,

Lazar

[Lazar Obradovic]

[golmsted]

Your external application probably doesn’t support being shown in an iFrame due to Clickjacking protection. Read about that here: https://www.owasp.org/index.php/Clickjacking

Basically it probably sets X-Frame-Options. If you have control over the external web application, you can set appropriate X-Frame-Options to get over this. If you can’t change that source code…well…you could introduce a Proxy Server that proxies the content.

g.

Gary Olmsted

Technical Leader, Finesse Architect

CBABU - Contact Center Software Development

[Lazar Obradovic]

Thank Gary,

we have control over web application, so we are able to try X-Frame-Options and we did it but without success.

We tried without X-Frame-Options, as well as with X-Frame-Options set to ALLOW-FROM.

Do you have any other suggestion?

Thank you in advance,

Lazar

[golmsted]

I’d try starting with the Sample provided from DevNet: https://github.com/CiscoDevNet/finesse-sample-code/tree/master/EmbeddedWebAppSampleGadget 

This is a very good sample and eliminates any doubts I might have.

g.

[Coty Condry]

Are you able to get this page working in an iframe in a standalone webpage, outside of Finesse? I'd start there to make sure that the content works in an iframe at all.

[AntonVoylenko]

Hello,

If you are using Firefox 23+ and iframe is using http protocol try to set "security.mixed_content.block_active_content" to false.