# Embedding the Prospective page in website using iframe **URL:** \ **Category:** Ignition\ **Created:** [March 26, 2025, 9:01am UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219 "2025-03-26T09:01:56Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![TechEnlive](https://avatars.discourse-cdn.com/v4/letter/t/3be4f8/32.png) [@TechEnlive](https://forum.inductiveautomation.com/u/TechEnlive)\ **Post date:** [March 26, 2025, 9:01am UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/1 "2025-03-26T09:01:56Z")
Hi, I am trying to embed a prospective page in our local website using iframe. But it shows error "10.x.x.x refused to connect". What I have tried to troubleshoot. Gateway - Config - Networking - Web Serve (can not find X-Frame-Options) ---
**Author:** ![TechEnlive](https://avatars.discourse-cdn.com/v4/letter/t/3be4f8/32.png) [@TechEnlive](https://forum.inductiveautomation.com/u/TechEnlive)\ **Post date:** [March 26, 2025, 9:42am UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/2 "2025-03-26T09:42:56Z")
It shows an error in the console "Refused to display '[http://10.1.1.202:8088/](http://10.1.1.202:8088/)' in a frame because it set 'X-Frame-Options' to 'sameorigin'.". i have manually added the line in ignition.conf ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/4/0/40c174c7a0ce407cdedcd69fcd26cbcdb42fa2dc.png) Then, restart the gateway service more than once, but it shows the same error. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 26, 2025, 10:41am UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/3 "2025-03-26T10:41:38Z")
From what documentation did you get that system property? It looks like you just made it up. See [Gateway and Gateway Network Parameters | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.1/appendix/reference-pages/gateway-configuration-file-reference/gateway-and-gateway-network-parameters#x-frame-options) which has some X Frame Options related properties. ---
**Author:** ![TechEnlive](https://avatars.discourse-cdn.com/v4/letter/t/3be4f8/32.png) [@TechEnlive](https://forum.inductiveautomation.com/u/TechEnlive)\ **Post date:** [March 26, 2025, 11:20am UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/4 "2025-03-26T11:20:56Z")
You are right Kevin. i just get this line of code from chatgpt. Can you let me know what value I should change as I wan to use one perspective page in our website using iframe that is hosted somewhere else. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 26, 2025, 11:31am UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/5 "2025-03-26T11:31:16Z")
You can try something like this: ```python wrapper.java.additional.7=-Dignition.http.header.x_frame_options.enabled=true wrapper.java.additional.8=-Dignition.http.header.x_frame_options.value="ALLOW-FROM *" ``` but I'm not sure browsers honor this any more... ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 26, 2025, 11:50am UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/6 "2025-03-26T11:50:40Z")
I think that it may not be possible to embed a Perspective view in an iframe unless you're attempting to do so from the same origin. Getting it to work with from other origins may require custom CSP headers, which aren't supported right now: [[IGN-3627]Perspective in iframe: X Frame Options and Content-Security-Policy](https://forum.inductiveautomation.com/t/ign-3627-perspective-in-iframe-x-frame-options-and-content-security-policy/103627) ---
**Author:** ![TechEnlive](https://avatars.discourse-cdn.com/v4/letter/t/3be4f8/32.png) [@TechEnlive](https://forum.inductiveautomation.com/u/TechEnlive)\ **Post date:** [March 26, 2025, 1:28pm UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/7 "2025-03-26T13:28:54Z")
Hi, I am able to access the page in my website but now it show me this error. Can you help me to solve this issue. The conf file i have updated as below: wrapper.java.additional.8=-Dignition.http.header.x\_frame\_options.enabled=true wrapper.java.additional.9=-Dignition.http.header.x\_frame\_options.value=ALLOWALL ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/1/7/17c7d64d5eeed94cac82346792a9cb7389ae8ad5.png) ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/f/0/f0163a66f045024267831cabcc690fc8ec96f9c0.png) ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [March 26, 2025, 1:47pm UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/8 "2025-03-26T13:47:36Z")
The browser refused the websocket. Possibly because it is not secure. Does Perspective work in that browser in its own page? ---
**Author:** ![victordcq](https://avatars.discourse-cdn.com/v4/letter/v/f6c823/32.png) [@victordcq](https://forum.inductiveautomation.com/u/victordcq)\ **Post date:** [March 26, 2025, 1:58pm UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/9 "2025-03-26T13:58:28Z")
Is the perspective running on https? is the website running the iframe runnign on https? Which browser are you using? firefox/chrome/edge have different security measures. "ws" suggestes one or the other is not https oh secure websites it should be "wss" iframes often dont work in nonsecure sites ---
**Author:** ![TechEnlive](https://avatars.discourse-cdn.com/v4/letter/t/3be4f8/32.png) [@TechEnlive](https://forum.inductiveautomation.com/u/TechEnlive)\ **Post date:** [March 26, 2025, 3:07pm UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/10 "2025-03-26T15:07:57Z")
Yes. Its working nornal but only issue when try iframe. ---
**Author:** ![TechEnlive](https://avatars.discourse-cdn.com/v4/letter/t/3be4f8/32.png) [@TechEnlive](https://forum.inductiveautomation.com/u/TechEnlive)\ **Post date:** [March 26, 2025, 3:08pm UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/11 "2025-03-26T15:08:53Z")
Try with Edge and Chrome but same error. Its http ---
**Author:** ![victordcq](https://avatars.discourse-cdn.com/v4/letter/v/f6c823/32.png) [@victordcq](https://forum.inductiveautomation.com/u/victordcq)\ **Post date:** [March 26, 2025, 3:19pm UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/12 "2025-03-26T15:19:23Z")
you should make both https ---
**Author:** ![TechEnlive](https://avatars.discourse-cdn.com/v4/letter/t/3be4f8/32.png) [@TechEnlive](https://forum.inductiveautomation.com/u/TechEnlive)\ **Post date:** [March 26, 2025, 3:28pm UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/13 "2025-03-26T15:28:05Z")
![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/4/1/412a49bf7116fcafcd2c3bdb9b178a85ced70467.png) ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/0/0/007219baa310591aa89ed8206a275d198de5de3e.png) ---
**Author:** ![victordcq](https://avatars.discourse-cdn.com/v4/letter/v/f6c823/32.png) [@victordcq](https://forum.inductiveautomation.com/u/victordcq)\ **Post date:** [March 26, 2025, 3:37pm UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/14 "2025-03-26T15:37:11Z")
> **[Secure Communication (SSL/TLS) | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.1/platform/gateway/config/web-server-settings/secure-communication-ssl-tls)** > > Inductive Automation recommends enforcing secure communication in Ignition using digital certificates. The Ignition Gateway web server can provide modern end-to-end security using Transport Level Security (TLS) technologies. This protects... ---
**Author:** ![TechEnlive](https://avatars.discourse-cdn.com/v4/letter/t/3be4f8/32.png) [@TechEnlive](https://forum.inductiveautomation.com/u/TechEnlive)\ **Post date:** [March 26, 2025, 4:27pm UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/15 "2025-03-26T16:27:16Z")
After impelementing SSL i can open gateway and project on local pc but on remote machine where use IP of gateway is still not working. ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/5/6/566a1a324fdea80d8606f9d522eafeeffcdc9522.png) ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [March 26, 2025, 4:29pm UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/16 "2025-03-26T16:29:59Z")
> [@TechEnlive](#): > > use IP of gateway You cannot do that with SSL, unless the IP address is in the SSL certificate as a subject alternative name. Make your remote machines use the domain name that is in the certificate. ---
**Author:** ![TechEnlive](https://avatars.discourse-cdn.com/v4/letter/t/3be4f8/32.png) [@TechEnlive](https://forum.inductiveautomation.com/u/TechEnlive)\ **Post date:** [March 27, 2025, 8:22am UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/17 "2025-03-27T08:22:48Z")
Domain mean here we will use Localhost??? Both machine are in same network. The website is running as VM and using DHCP so have different IP. Gateway: localhost:8088 (10.1.1.202:8088) Website: Machine 10.1.1.65 (DHCP assign IP VM 192.168.17.128). I hope you understood the network scenario. ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/1/0/109b23a4a21ee8bb52564dc6c3a8185cee6773e0.png) ---
**Author:** ![TechEnlive](https://avatars.discourse-cdn.com/v4/letter/t/3be4f8/32.png) [@TechEnlive](https://forum.inductiveautomation.com/u/TechEnlive)\ **Post date:** [March 27, 2025, 9:18am UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/18 "2025-03-27T09:18:15Z")
I have updated SSL (Self-Signed SSL Certificate installed). Now able to access with localhost:8043. on remote machine in chrome it show all fine but in website iframe it show connecting..... When open console and fine the error websocket connection to wss://10.1.1.202:8043 failed. ---
**Author:** ![victordcq](https://avatars.discourse-cdn.com/v4/letter/v/f6c823/32.png) [@victordcq](https://forum.inductiveautomation.com/u/victordcq)\ **Post date:** [March 27, 2025, 10:19am UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/19 "2025-03-27T10:19:01Z")
> [@TechEnlive](#): > > wrapper.java.additional.9=-Dignition.http.header.x\_frame\_options.value=ALLOWALL It seems like this is out dated and should use this now... ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/1/6/164b0ac52ac6fdea2feb7fdc2ebb6bbed65434cf.png) > **[CSP: frame-ancestors - HTTP | MDN](https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/frame-ancestors)** > > The HTTP Content-Security-Policy (CSP) frame-ancestors directive specifies valid parents that may embed a page using , I do not know if there is a java setting for it ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [March 27, 2025, 12:23pm UTC](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219/20 "2025-03-27T12:23:53Z")
> [@TechEnlive](#): > > Self-Signed SSL Certificate installed You will need to have all IP addresses of the gateway in that certificate as subject alternative names. It is best to simply assign an actual DNS name in your local infrastructure and put that name in your certificate. [Next page](https://forum.inductiveautomation.com/t/embedding-the-prospective-page-in-website-using-iframe/104219.md?page=2)