# Iframe working in Edge, Firefix but not Chrome **URL:** \ **Category:** Ignition\ **Tags:** perspective\ **Created:** [October 13, 2022, 10:28pm UTC](https://forum.inductiveautomation.com/t/iframe-working-in-edge-firefix-but-not-chrome/65213 "2022-10-13T22:28:38Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Daniel\_Woodson](https://avatars.discourse-cdn.com/v4/letter/d/7bcc69/32.png) [@Daniel\_Woodson](https://forum.inductiveautomation.com/u/Daniel_Woodson)\ **Post date:** [October 13, 2022, 10:28pm UTC](https://forum.inductiveautomation.com/t/iframe-working-in-edge-firefix-but-not-chrome/65213/1 "2022-10-13T22:28:39Z")
So I've just made a perspective view that has an iframe. In the designer the web pages show up, in Firefox v105.0.1 they show up and in Edge Version 106.0.1370.42 they show up but in Chrome Version 105.0.5195.127 the iframe is not showing up. Just listing the version numbers in case someone asks, these are all the current versions as of today. This is in windows 10 Pro. The first couple of pages have some suggestions like changing the internet settings and downloading chrome extensions but none of that has had any effect. Has anyone had this problem before and found a way to fix it? ---
**Author:** ![victordcq](https://avatars.discourse-cdn.com/v4/letter/v/f6c823/32.png) [@victordcq](https://forum.inductiveautomation.com/u/victordcq)\ **Post date:** [October 14, 2022, 6:39am UTC](https://forum.inductiveautomation.com/t/iframe-working-in-edge-firefix-but-not-chrome/65213/2 "2022-10-14T06:39:09Z")
iframe has various security settings across different browsers, what is in de iframe? something you(r company) owns and has control over? ---
**Author:** ![Daniel\_Woodson](https://avatars.discourse-cdn.com/v4/letter/d/7bcc69/32.png) [@Daniel\_Woodson](https://forum.inductiveautomation.com/u/Daniel_Woodson)\ **Post date:** [October 14, 2022, 3:26pm UTC](https://forum.inductiveautomation.com/t/iframe-working-in-edge-firefix-but-not-chrome/65213/3 "2022-10-14T15:26:26Z")
Sure. But for example what/where are those security settings and what might they be changed to to help. The content of the iframe is the webserver from a "Smart Relay" by Idec. The webserver is only capable of serving http. I tried changing the "referrerPolicy" in the Ignition Designer but that also does not seem to have any effect. I've also messed with the windows security policy specifically the iframe setting, no effect. The problem seems to be localized to chrome but I haven't found any specific info about what to change or update. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [October 14, 2022, 3:49pm UTC](https://forum.inductiveautomation.com/t/iframe-working-in-edge-firefix-but-not-chrome/65213/4 "2022-10-14T15:49:05Z")
Any time you use an IFrame that is on a different host from your gateway, you trigger a rat's nest of security rules. "Content Security Policy" being the most significant. The most reliable way to solve this problem is to put Ignition and the other content behind a reverse proxy, like nginx or Apache. That will simultaneously allow wrapping of that HTTP-only content in HTTPS. ---
**Author:** ![a344254](https://avatars.discourse-cdn.com/v4/letter/a/f05b48/32.png) [@a344254](https://forum.inductiveautomation.com/u/a344254)\ **Post date:** [March 3, 2023, 6:02pm UTC](https://forum.inductiveautomation.com/t/iframe-working-in-edge-firefix-but-not-chrome/65213/5 "2023-03-03T18:02:21Z")
Hi, are you able to elaborate on your comment in this post about putting Ignition behind a reverse proxy? I have some TVs that that I would like to run a custom web application on, and within that web application I want to display an iFrame to an Ignition Perspective page, but it fails due to x\_frame\_options. I got around that by enabling HTTPs and adding these to my ignition.conf file wrapper.java.additional.2=-Dignition.http.header.x\_frame\_options.enabled=false wrapper.java.additional.3=-Dignition.http.session.cookie.same-site.value=None wrapper.java.additional.4=-Dignition.http.session.cookie.same-site.enabled=true however now I have an issue where my certificate can't be installed onto the TV ☹ Would putting Ignition behind a reverse proxy allow me to use HTTP from my TV and embed Ignition into an iFrame? ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [March 3, 2023, 6:04pm UTC](https://forum.inductiveautomation.com/t/iframe-working-in-edge-firefix-but-not-chrome/65213/6 "2023-03-03T18:04:24Z")
Unrelated. Whatever you use as a reverse proxy would need to have a certificate acceptable to the TV. Communications between the proxy and the proxied sites are independent of the TV's requirements. ---
**Author:** ![a344254](https://avatars.discourse-cdn.com/v4/letter/a/f05b48/32.png) [@a344254](https://forum.inductiveautomation.com/u/a344254)\ **Post date:** [March 3, 2023, 6:17pm UTC](https://forum.inductiveautomation.com/t/iframe-working-in-edge-firefix-but-not-chrome/65213/7 "2023-03-03T18:17:16Z")
There's no way to have the communication between the TV and the reverse proxy as HTTP traffic, and between the proxy and Ignition as HTTPs (if required)? Essentially what I really want/need is a way to allow my web page to display a Perspective page in an iFrame without having to use HTTPS ---
**Author:** ![a344254](https://avatars.discourse-cdn.com/v4/letter/a/f05b48/32.png) [@a344254](https://forum.inductiveautomation.com/u/a344254)\ **Post date:** [March 13, 2023, 7:59pm UTC](https://forum.inductiveautomation.com/t/iframe-working-in-edge-firefix-but-not-chrome/65213/8 "2023-03-13T19:59:04Z")
I've been trying to get this to work for days ☹ I can get my Perspective page to load properly through an NGINX reverse proxy when it's not in an iFrame, but when it's in an iFrame it gets stuck on the authenticating screen and is giving errors in the console about the web socket connection. I believe it's because the JSESSIONID cookie isn't being sent along with the request, but I can't for the life of me figure out how to get it to work. I've tried injecting that cookie in the reverse proxy, but no luck. Anybody that has any expertise in this I would greatly appreciate the help...please