Details
-
Bug
-
Resolution: Unresolved
-
High
-
6
-
Minor
-
7
-
Description
Issue Summary
By default, Confluence cannot be rendered via an iFrame in external sites due to the 'sameorigin' policy in the X-FRAME options for Atlassian Cloud (CONFCLOUD-66693).
When using the iFrame macro to point it to Jira/Jira Service Management in the same instance, it will allow the content to be displayed. However, if the macro is added within a third-party app macro, it will fail:
Refused to display '<URL>' in a frame because it set 'X-Frame-Options' to 'sameorigin'.
Steps to Reproduce
- Have Confluence and Jira configured in the same instance (I.E. https://INSTANCE.atlassian.net for Jira and https://INSTANCE.atlassian.net/wiki for Confluence).
- Create a Confluence page and insert the iFrame macro, configuring it to point to Jira.
- Add this macro within a third-party macro, like the Tabs from Navitabs. Notice that the macro properly displays the Jira content within the iFrame while being edited.
- Publish the page.
Expected Results
As in the "edit" mode, the iFrame should render the Jira content from the same instance.
Actual Results
The iFrame within the third-party macro displays the following message:
INSTANCE.atlassian.net refused to connect.
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available.
Attachments
Issue Links
- is related to
-
CONFCLOUD-66693 Allow to iframe Confluence in other sites
- Gathering Interest
-
CONFCLOUD-73980 Allow embedding pages in iframes from different domains if they have App Links configured
- Gathering Interest
- relates to
-
CONFCLOUD-78259 Improving Edit Mode Table Filtering in Confluence Cloud: Overcoming iFrame Limitations
- Gathering Interest