Show salesforce Lightning in a pop-up iframe

Ethan Granger

October 09, 2018 23:44

I have a function that opens an iframe and will load the corresponding record in Salesforce when a feature is clicked. This works when the user is "classic" mode, but fails in "Lightning" mode with the error: Refused to display in a frame because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self'". I've adde both salesforce.com and force.com to GCE trusted URLs and CORS. I've also added our GCE domain to our SalesForce Org CSP Trusted sites and CORS and I still get the same error. Is there some other whitelisting I need to do?

0

• 

  Permanently deleted user

  October 12, 2018 22:47

  Hi Ethan,

   

  Can you see the CSP header that is being sent with the request? 

   

  ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP

   

  Regards,

   

  Wayne

  0

Please sign in to leave a comment.