Forum Discussion

suvi-15's avatar
suvi-15
Brass Contributor
Apr 12, 2022
Solved

Iframe-Embedded url teams Tab App not working

Hi,   I am trying to embed url in Iframe but it giving me frame violation error. Please not url already been modified for Content-Security-Policy: frame-ancestors teams.microsoft.com *.teams...
developer
microsoft teams
  • suvi-15's avatar
    suvi-15
    Apr 14, 2022

    Hi,

     

    I found the solution for this issue... normally when we create Custom Team Tab Application we host the application somewhere lets say in azure then we need to specify that domain in frame-ancestor.

Prasad_Das-MSFT's avatar
Prasad_Das-MSFT
Icon for Microsoft rankMicrosoft
Apr 12, 2022

suvi-15 -

The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a <frame>, <iframe> or <object>. Sites can use this to avoid clickjacking attacks, by ensuring that their content is not embedded into other sites.

For More Information: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options

Thanks, 

Prasad Das

-------------------------------------------------------

If the response is helpful, please click "**Mark as Best Response**" and like it. You can share your feedback via Microsoft Teams Developer Feedback link.

suvi-15's avatar
suvi-15
Brass Contributor
Apr 13, 2022
Hi Prasad,
In Custom Team Tab Application in which we host application lets say in Azure... so that azure website url needs to be added in X-Frame-options or Team url?

Resources