Forum Discussion
Custom app is not loading
Microsoftrelkniw - The page that loaded by iframe returned this error. The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a <frame>, <iframe>, <embed> or <object>. Sites can use this to avoid click-jacking attacks, by ensuring that their content is not embedded into other sites.
Ensure that you adhere to the following prerequisites while building your Teams personal and channel or group tab:
-
Allow your tab pages to be discovered in an iFrame, using X-Frame-Options and Content-Security-Policy HTTP response headers.
- Set header:
Content-Security-Policy: frame-ancestors teams.microsoft.com *.teams.microsoft.com *.skype.com - For Internet Explorer 11 compatibility, set
X-Content-Security-Policy. - Alternately, set header
X-Frame-Options: ALLOW-FROM https://teams.microsoft.com/. This header is deprecated but still accepted by most browsers.
- Set header:
Can you give me further information where I have to configure that for a asp.net web application hosted on IIS?
And what has changed in MS Teams 1.5.00.28361 that this failure occours? Because the application works fine in 1.5.00.21668 .