iFrame no longer working

1

hi,

is it me, or aren’t ‘iFrames’ no more working?

Something about using only links that you trust. Can I ‘trust’ them somewhere? Was working before.

‘embed’ seems to work, but then I’d have to recode…

thanks,

David

2

Hey @DavidCeulemans, I asked the dev team to check this issue. :raising_hands:

1 Like
3

Hey @DavidCeulemans

We recently improved the security for our IFrame element. This change may have impacted your existing integration. To help us identify the best solution, could you please clarify a few details?

  • When you mentioned that something isn’t working, what exactly is failing (e.g., content not loading, script errors)?
  • Are you using JavaScript within your embedded content to interact with the page?
  • External URLs content are blocked in the editor but remain partially executed during preview and published versions. Is this issue also occurring in your live environment?
  • If you are relying on JavaScript to access page content, have you considered hosting a custom external JavaScript file instead of accessing it directly from within the IFrame?

Looking forward to your answers so we can move forward with a fix.

4

Hi Jrmi,

thanks for looking into this.

I’ve been using iframes to show google-sheets charts. I’m using the interactive versions as opposed to flat images, so I assume there’s JS involved indeed.

if this kind of content is depreciated in frames, no problem, I can switch to embedding them instead. But if it’s a bug…

Edit: if you want to check: https://spookycigars.baserow.site/statistics

First chart = embedded, the others are iframes.

thanks again,

david

5

Thansk for your answer and the link to the broken application, it helped.

I think it makes sense to add a property to unlock some security for URL when the user wants it. But these integrations will still only work in preview and published mode to not compromise the security.

What do you think?

Follow issue IFrame element rejects previously working URLs as untrusted · Issue #5812 · baserow/baserow · GitHub for more information.

6

if you mean that the iframe won’t be ‘preview-able’ in the editor: that’s unfortunate, but the actual ‘Preview’ and ‘Published’ results are most important imo.

Just make sure the user is warned about it?