# IFrame not obeying referrerPolicy on iPad

**URL:** <https://forum.inductiveautomation.com/t/iframe-not-obeying-referrerpolicy-on-ipad/88982>\
**Category:** Ignition\
**Tags:** ignition81, perspective\
**Created:** [April 17, 2024, 3:41pm UTC](https://forum.inductiveautomation.com/t/iframe-not-obeying-referrerpolicy-on-ipad/88982 "2024-04-17T15:41:17Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ben\_Hunt](https://avatars.discourse-cdn.com/v4/letter/b/0ea827/32.png) [@Ben\_Hunt](https://forum.inductiveautomation.com/u/Ben_Hunt)\
**Post date:** [April 17, 2024, 3:41pm UTC](https://forum.inductiveautomation.com/t/iframe-not-obeying-referrerpolicy-on-ipad/88982/1 "2024-04-17T15:41:17Z")

</div>

### Background

I'm developing a visitor app that needs to take a picture of the user who is visiting and then save that to a database. I could use the file upload component but then the user could just upload a picture from the photo library instead of themselves. So wrote a little mini application, in PHP and HTML for our apache server, to be embedded in an IFrame. From this I am able to access the front facing iPad camera and save a file to the database.  
`referrerPolicy` is set to `unsafe-url` while I'm testing.

### Problem

I have set the iframe to point to my php photo app. When I go to upload a file to it (through ignition perspective) _ **on a computer** _ I am able to pass through all of the information I need shown below  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/4/2/427fb2ccdcf19c514f7b9ed8827b5b492067450d.png)  
with `[HTTP_REFERER]` I am able to get the `visitor` parameter.

When I go to test the same thing _ **on an iPad** _ it breaks because `[HTTP_REFERER]` is set to `http://172.16.1.10/` meaning I can't get the `visitor` param.

### Question

Why does the iPad behave differently to the computer? Is this an Apple security measure? Am I misunderstanding the `referrerPolicy`?

---

<div class="post-metadata">

**Author:** ![Ben\_Hunt](https://avatars.discourse-cdn.com/v4/letter/b/0ea827/32.png) [@Ben\_Hunt](https://forum.inductiveautomation.com/u/Ben_Hunt)\
**Post date:** [April 17, 2024, 4:33pm UTC](https://forum.inductiveautomation.com/t/iframe-not-obeying-referrerpolicy-on-ipad/88982/2 "2024-04-17T16:33:21Z")

</div>

I had to enable Cross-Website Tracking in Chrome and it worked on the iPad