xframe denied - no iframe embedding?

[0xym0r0n]

My 1.1.3 version of XF will allow me to use iframe to embed an external or local website, but 1.1.4 will not.

Example you can create a test.html file

<iframe src="http://www.xenforo.com/community/"></iframe>

will result in a blank iframe because xframe is denied.

I'm unsure of how to adjust the headers I read somewhere about using

header('X-Frame-Options: GOFORIT');

but that doesn't seem to be working... I've probably not inserted that in the wrong area or it's being overwritten and I'm not sure where....

 

[0xym0r0n]

Found my answer... lol I really need to not post questions anymore...
>.> search clickjacking here and you'll find your answer

 

[Strong]

Found my answer... lol I really need to not post questions anymore...
>.> search clickjacking here and you'll find your answer

I've been racking my head over this. clickjacking is over my head. How did you correct this?

 

[Paul B]

http://xenforo.com/help/config-php-options/

 

[Strong]

Thank you Brogan. I did get to that, but it is isn't working. I tried the true and false flags, rebuild cache for good measure, and still no luck either way. There must be something else keeping me from successfully making an iframe page node.

 

[Paul B]

The clickjacking option in config.php is with regards to embedding XenForo in an iframe.

 

[Strong]

ahhh.. I'm barking up the wrong tree I see. lol Nothing out of the norm for me! lol Thanks man.