742
Views
9
Comments
Cannot decrypt the content - application in iframe in safari
Question

Hi,


just upgraded silkUI to 2.2.2 but now I am getting this error when having a application in an iframe in safari:


Cannot decrypt the content

at OutSystems.RuntimeCommon.Cryptography.SymmCryptHelper.DecryptThenMacWithAESDotNet(Byte[] keyBytes, Byte[] allBytes, Byte[] associatedData)
   at OutSystems.HubEdition.WebWidgets.OSPageViewStateCompressed.DeserializeViewState(String viewState, String& hash)

2012-03-16 12-21-09
João Rosado
Staff

Hi,


That doesn't look like it's anything related to silk.

One of the latest platform security upgrades included viewstate encryption and that's what is causing your that problem.

I recommend you reading about cross-domain iframes and cookies in safari (it probably also affects IE in the same way, since both browsers have the same iframe restrictions), that is most likely the cause of your issue.


Regards,
João Rosado 

2016-04-21 20-09-55
J.
 
MVP

Agreed, reading somewhat more and I noticed we had indeed some crossdomain issues.

Funny enough it's only happening so far in safari.


ah well, out of my hands atm :)



2016-04-21 20-09-55
J.
 
MVP

Well,


I have searched, but unable to fix it for the iframe.

Guess I have to strip silkUI now, use cookies=false and hopefully that will solve it.

the encryption is indeed something fishy.


2012-03-16 12-21-09
João Rosado
Staff

Like I said your issue has nothing to do with SilkUI.

Also setting the module to Use Cookies to false will most likely won't help as the problem is not the session cookie.


If you need more help on it I recommend you opening a support case for it.


Regards,

João rosado

2016-04-21 20-09-55
J.
 
MVP

That I figured already :)


Thanks!


UserImage.jpg
Dirk Dooms

Hey, 

Did you ever figure out what the issue was? I have the same problem it seems.

Regards,

Dirk

2016-04-21 20-09-55
J.
 
MVP

Nope, 

it's a matter of policies with safari and ie.. nothing to do about it.

(always prevent iframes btw  ;) )



2019-11-08 16-23-42
César Mateus Conceição

J. wrote:

Nope, 

it's a matter of policies with safari and ie.. nothing to do about it.

(always prevent iframes btw  ;) )



Can you explain J. ? I'm getting a lot of issue with this too.

What kind of policies we need?
Maybe this Class (OSPageViewStateCompressed) can perform this problem when AJAX involved. Cause I guess this compressed and encrypt the viewstate

When we are in a web farm this can cause some issues in my research.

Thanks


2025-01-09 14-56-57
IQ78

https://www.outsystems.com/forums/discussion/47056/using-iframe-in-outsystems-applications/

Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.