Forum Discussion
relkniw
Oct 21, 2022Brass Contributor
Custom app is not loading
Hi everybody, our Web-Application does work in the MS-Teams Client version 1.5.00.21668 but it does not work anymore since update the MS Teams client to version 1.5.00.28361. The application s...
Prasad_Das-MSFT
Microsoft
Oct 25, 2022relkniw - The page that loaded by iframe returned this error. The X-Frame-Options
HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a <frame>
, <iframe>
, <embed>
or <object>
. Sites can use this to avoid click-jacking attacks, by ensuring that their content is not embedded into other sites.
Ensure that you adhere to the following prerequisites while building your Teams personal and channel or group tab:
-
Allow your tab pages to be discovered in an iFrame, using X-Frame-Options and Content-Security-Policy HTTP response headers.
- Set header:
Content-Security-Policy: frame-ancestors teams.microsoft.com *.teams.microsoft.com *.skype.com
- For Internet Explorer 11 compatibility, set
X-Content-Security-Policy
. - Alternately, set header
X-Frame-Options: ALLOW-FROM https://teams.microsoft.com/
. This header is deprecated but still accepted by most browsers.
- Set header:
relkniw
Oct 26, 2022Brass Contributor
Can you give me further information where I have to configure that for a asp.net web application hosted on IIS?
And what has changed in MS Teams 1.5.00.28361 that this failure occours? Because the application works fine in 1.5.00.21668 .
- Prasad_Das-MSFTOct 26, 2022
Microsoft
relkniw - Please refer:
1. Set X-FRAME-OPTIONS in ASP.NET Core - .NET Core Tutorials (dotnetcoretutorials.com)
2. X-Frame-Options - HTTP | MDN (mozilla.org)