9.0.5 - Iframe-Dashlet problem (bug or not ?)

[i-Arbeitsschutz]

Hi there,

I've updated to 9.0.5 last friday - today I was noticed that our Google Map (showing all customers) in the IFrame-Dashlet cannot be resized any longer - the button shown in the image doesn't work anymore. I double-checked whether it is a website fault, since the resize-button is part of Google's website, but entering the URL (https://www.google.com/maps/d/embed?mid=1mfMMxxxxxxxxxxxx) in the browser directly, the resize-button is working - only no longer in the iFrame-Dashlet. Have you changed something in the code ?

Kind regards, Martin

[yuri]

In v9.0.5 we added sandbox="allow-scripts" to the iframe which is a security measure. It might be the cause of the problem.

[Тимофей]

Before updating to 9.0.5, a separate window with Grafana displayed all data, now there is such a problem, does anyone know how to solve it?

[yuri]

There no fix yet. We are likely to add a configurable exclusion domain list.

[Тимофей]

There no fix yet. We are likely to add a configurable exclusion domain list.

Thank you, we are waiting

[yuri]

A config parameter iframeSandboxExcludeDomainList will be available in v9.0.7.

[i-Arbeitsschutz]

A config parameter iframeSandboxExcludeDomainList will be available in v9.0.7.

That would be great

[Zebaas]

In v9.0.5 we added sandbox="allow-scripts" to the iframe which is a security measure. It might be the cause of the problem.

How would I go about disabling this? I'm having a similar problem where it will show the (LAN) website, but will not allow me to login. The button simply does nothing. Thanks in advance! Loving ESPO

[yuri]

How would I go about disabling this?

Wouldn't iframeSandboxExcludeDomainList parameter work for your case?

[Zebaas]

Wouldn't iframeSandboxExcludeDomainList parameter work for your case?

Bear with me here...where. I'm not a web developer in the traditional sense, abd it was not in the config.php. I don't see anything while searching in the files themselves. Your help is greatly appreciated.

[i-Arbeitsschutz]

YUUURII... I'm getting the crisis... Yesterday morning I've updated to 9.1.2 and now I get responses from customers, that they are no longer able to send off a filled-in form of another website that's included in our website by an iframe-Dashlet in a Dashboard-Template. It could be coincidence that it started happening right after last update - the problem might have occurred already whe I updated to previous version last week - so there must have been changed something in this regard between 9.1.0 and 9.1.2 ...

I've included the other website URL in iframeSandboxExcludeDomainList in config.php, but it didn't help at all !

And by the way: above problem hasn't been resolved either - google maps can still not be opened in an iframe-Dashlet !

I'd really appreciate if you could give me some advice how to make it work again !! THANK YOU !!