Products

Solutions

Learn More

Partners

Community

Blog

About

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsIFrameIFrameIFrame v04.03.00 Access is deniedIFrame v04.03.00 Access is denied
Previous
 
Next
New Post
2/26/2008 11:13 AM
 

Hello,

I've just upgraded IFrame to v04.03.00 on DNN 4.8.0. I was particularly interested in the Auto Height option.

When I select Auto Height to be True, I've noticed to things:

1) Auto height does not occur

2) I see "Access is denied" in the lower left of IE7

As soon as I remove Auto Height, the error in #2 goes away. Other than that, the IFrame is working as it did with the old 03.xx version.

The site is running in Medium Trust, if that has any bearing.

Thanks for any help with this.

Rob

 


Rob Ralston, SilverBullet Technologies LLC, www.silverbullettech.com
 
New Post
2/26/2008 12:32 PM
 

Hi Rob,

"Access denied" error means that user's browser feels that it is unsafe for the main page to fiddle around the IFrame'd page. This security setting is not possible to overwrite, unfortunately. (Or, actually, fortunately, just not for IFrame designers :) )

This condition occurs when the domain of the main page is different from the domain of the included page. So, you can't IFrame yahoo.com into your site's page and have it autosize for you.

WARNING: mysite.com and www.mysite.com are considered DIFFERENT domains for this security issue. To avoid the problem 100% of the time, you should really just use a relative path, but that is not available with the current version of IFrame module. We will include this in the next version, of course.


Vitaly Kozadayev
Principal
Viva Portals, L.L.C.
 
New Post
2/26/2008 1:17 PM
 

Thanks, Vitaly,

I had never encountered that before, so I appreciate the explanation and look forward to the next version.

Rob


Rob Ralston, SilverBullet Technologies LLC, www.silverbullettech.com
 
New Post
2/26/2008 3:03 PM
 

The reason you haven't see it before is because it only happens when client-side script tries to snoop around a page displayed in IFRAME. So, when you selected auto height, you effectively invoked a client-side Javascript code that attempts to load the structure of the IFRAME'd document and check the height of it. It can do countless other things, but here it just does that. As soon as such an attempt is made, browser checks if it should allow Javascript to see that documents structure.

So, as you can see, unless you actually have some kind of client-side script doing these sort of things, you wouldn't encounter the issue. Since it's not super common - you haven't seen it yet.

We will try to implement some watch dogs in the future that would signal a developer of the site that they are going to have this problem. But for now... it's just me :)


Vitaly Kozadayev
Principal
Viva Portals, L.L.C.
 
New Post
1/26/2009 2:12 PM
 

I have already tried removing the autosize, but whenever I try to access anything that has some java script in it I keep getting the access is denied error. Do you have a beta verion of the IFrame where the relative path feature is implemented.

I currently have my site inside the DNN portal inside a seperate directory.

I would like to a reference URL like ~/mysite/Default.aspx

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsIFrameIFrameIFrame v04.03.00 Access is deniedIFrame v04.03.00 Access is denied


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.

Content Layout

Subscribe to DNN Digest

Subscribe to DNN Digest

DNN Digest is our monthly email newsletter. It highlights news and content from around the DNN ecosystem, such as new modules and themes, messages from leadership, blog posts and notable tweets. Keep your finger on the pulse of the ecosystem by subscribing.  

What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out