ajax iframe content not loaded
Loading an iframe result in a blank iframe which contains only html and body tags. There is no error in the console. There is no mixed content. There is no cross site request. All is in http and relative to the same domain. I don't know if it important but the website is not under apache but nginx. Tried on a fresh Firefox, tried on safe mode, tried also on my firefox android which has no add-on. Problem still exists. The iframe is displayed well on chrome browser. To reproduce: Go to: http://taekwondoluxembourg.com/index.php?option=com_phocagallery&view=category&id=34:passages&Itemid=154 Click any photo and see the blank iframe
Chosen solution
Does it has effect if you do not send the X-FRAME-OPTIONS header?
Read this answer in context 👍 1All Replies (7)
Please fix the coding errors : HTML : https://validator.w3.org/ ERRORS : https://validator.w3.org/nu/?doc=http%3A%2F%2Ftaekwondoluxembourg.com%2Findex.php%3Foption%3Dcom_phocagallery%26view%3Dcategory%26id%3D34%3Apassages%26Itemid%3D154
CSS : https://jigsaw.w3.org/css-validator/ ERRORS : https://jigsaw.w3.org/css-validator/validator?uri=+http%3A%2F%2Ftaekwondoluxembourg.com%2Findex.php%3Foption%3Dcom_phocagallery%26view%3Dcategory%26id%3D34%3Apassages%26Itemid%3D154&profile=css3svg&usermedium=all&warning=1&vextwarning=&lang=en
Please let us know if this solved your issue or if need further assistance.
Hi, I didn't though about that. I was thinking that joomla generate clean and standard HTML. It's seems not. As it's generated and in production is hard right now to fix that errors, but i will make a test version and do the fix in the core of joomla to ensure if it's relied to this. As soon as i have fixed it and tested again, i will post here again. Thanks for pointing me that.
Chosen Solution
Does it has effect if you do not send the X-FRAME-OPTIONS header?
cor-el a écrit
Does it has effect if you do not send the X-FRAME-OPTIONS header?
Your link is broken, it give me a 404. If i remember good, i already does this test but to be very sure. i'll do it today and get back to you.
cor-el a écrit
Does it has effect if you do not send the X-FRAME-OPTIONS header?
Yes removing it fix the problem. I have added it for another site which needed last year. Actually i didn't checked but today the other site was also a blank page, removing the header make the other site came back (which is proxyed btw). This is strange, how this header can do that when the value choosen is SAMEORIGIN and all is in the same origin ? Also Thanks for the solution
You're welcome.
Maybe you need to use the full URL instead of a relative link to make this work.
cor-el said
You're welcome. Maybe you need to use the full URL instead of a relative link to make this work.
I tried full url in the first time. It was not working. But as it's a generated site (joomla), i changed the url in live with console. (I'm not a joomla expert so it was faster for me to do so) Maybe it has impact, i'm not sure