I am getting the following to errors in the Chrome Browser developer console with enabling of CSP in LifeTime for a specific App.
The Content Security Policy directive 'frame-ancestors' is ignored when delivered via a element.
The Content Security Policy directive 'report-uri' is ignored when delivered via a element.
I have tried disabling CSP in LifeTime and the <meta> tags that specifies the CSPs are also gone so it should not have been added outside of enabling the CSP in LifeTime.
Hi Jeremy,
The issue might not be related to your OutSystems application webpage, but with the page you're trying to embed in an iframe.
Is the page you're trying to load in an iframe also originated from an OutSystems app? If it originates from an external source, you might need to allow that page to be loaded in an iframe to begin with.
Regards,
Nordin
@Nordin Ahdi , I got the same problem, using google, apple and facebook login. How can I allow frames to be displayed. Please do not say set frame-ancestors to :
https://*.google.com
https://accounts.google.comselfBecause everyone is replying with that answer and its not sufficiant; same error ..