Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-45611

Browser error while sharing portlets via Widget servlet (related to 'X-Frame-Options' header added in 6.2)

    Details

      Description

      Liferay allows sharing portlets with other websites via WidgetServlet (JavaScript snippet from Portlet Configuration -> Sharing -> Any Website). It used to work fine until version 6.2 'X-Frame-Options' header for every request.

      At the moment, if I want to include remote portlet on my website, browser console says Refused to display 'http://host/widget/web/guest/home/-/56_INSTANCE_TtFG4Bd9fkkh' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN' and does not display my portlet (Chrome console says that, Firefox just doesn't display an iframe without any error).

      This issue has emerged from this forum post https://www.liferay.com/community/forums/-/message_boards/view_message/36390907.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              tomas.polesovsky Tomáš Polešovský
              Reporter:
              kgolebiowski Krzysztof Gołębiowski
              Participants of an Issue:
              Recent user:
              Esther Sanz
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                6 years, 30 weeks, 3 days ago

                  Packages

                  Version Package