Lotus Notes X-Frame option

1
votes

I have a Lotus Notes web application which is been loaded in to another web application, after we upgraded to domino from 9.0.1 to Domino V10.0.4 the application fails to load in this portal, the application can be accessed individually in browser but while loading in another application it fails with error

Load denied by X-Frame-Options: http://achme.com/achme.NSF/frameset?readform does not permit cross-origin framing.

any hint on fixing the error enter image description here enter image description here

1
lotus-noteslotus-domino

1 Answers

1
votes

It seems that your Domino- server has a header value for X-Frame-Options set.

This can either be done with a Website- Rule of type "HTTP response headers" that defines the header in the domino directory:

X-Frame-Options: SAMEORIGIN

Possible values:

X-Frame-Options: deny
X-Frame-Options: sameorigin
X-Frame-Options: allow-from https://example.com/

Or it is set via notes.ini Entry:

HTTPAdditionalRespHeader=X-Frame-Options: SAMEORIGIN

Check your domino directory and the notes.ini for the setting and set it to something more relaxed if you need the page to be loaded in an iframe.

Do you happen to have changed the FQDN of your Domino server when upgrading? That might be a reason why the same setting worked in Domino 9 (old hostname) and does not work for the new server (new hostname).