# Show http URL in Iframe in Perspective

**URL:** <https://forum.inductiveautomation.com/t/show-http-url-in-iframe-in-perspective/65747>\
**Category:** Ignition\
**Tags:** perspective\
**Created:** [October 27, 2022, 10:57am UTC](https://forum.inductiveautomation.com/t/show-http-url-in-iframe-in-perspective/65747 "2022-10-27T10:57:14Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![user66](https://avatars.discourse-cdn.com/v4/letter/u/b487fb/32.png) [@user66](https://forum.inductiveautomation.com/u/user66)\
**Post date:** [October 27, 2022, 10:57am UTC](https://forum.inductiveautomation.com/t/show-http-url-in-iframe-in-perspective/65747/1 "2022-10-27T10:57:14Z")

</div>

Hi all,  
I have an http(not secure) url that should be binded to an Inline Frame  
But I have have to view the Inline Frame in an https url  
Is this possible?

---

<div class="post-metadata">

**Author:** ![victordcq](https://avatars.discourse-cdn.com/v4/letter/v/f6c823/32.png) [@victordcq](https://forum.inductiveautomation.com/u/victordcq)\
**Post date:** [October 27, 2022, 11:11am UTC](https://forum.inductiveautomation.com/t/show-http-url-in-iframe-in-perspective/65747/2 "2022-10-27T11:11:21Z")

</div>

it highely depends where the webpage is from. iframe security is tough to predict, you'll just have to try it out. some things will be limited, it really just depends on what is needed

---

<div class="post-metadata">

**Author:** ![user66](https://avatars.discourse-cdn.com/v4/letter/u/b487fb/32.png) [@user66](https://forum.inductiveautomation.com/u/user66)\
**Post date:** [October 27, 2022, 11:17am UTC](https://forum.inductiveautomation.com/t/show-http-url-in-iframe-in-perspective/65747/3 "2022-10-27T11:17:16Z")

</div>

Thanks for that  
I tried charging the `referral policy` property but it didn't work

---

<div class="post-metadata">

**Author:** ![victordcq](https://avatars.discourse-cdn.com/v4/letter/v/f6c823/32.png) [@victordcq](https://forum.inductiveautomation.com/u/victordcq)\
**Post date:** [October 27, 2022, 11:20am UTC](https://forum.inductiveautomation.com/t/show-http-url-in-iframe-in-perspective/65747/4 "2022-10-27T11:20:58Z")

</div>

Other browsers might have different security around iframe, but i doubt you want your clients to use those xd  
Where is this http site from? Does the company have access to it ?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [October 27, 2022, 11:59am UTC](https://forum.inductiveautomation.com/t/show-http-url-in-iframe-in-perspective/65747/5 "2022-10-27T11:59:21Z")

</div>

This is generally not allowed by browsers: [Mixed content - Web security | MDN](https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content)

My usual recommendation is to put reverse proxy that has HTTPS enabled in front of legacy resources that can't be upgraded to use HTTPS.

---

<div class="post-metadata">

**Author:** ![Simen](https://avatars.discourse-cdn.com/v4/letter/s/7cd45c/32.png) [@Simen](https://forum.inductiveautomation.com/u/Simen)\
**Post date:** [October 27, 2022, 12:46pm UTC](https://forum.inductiveautomation.com/t/show-http-url-in-iframe-in-perspective/65747/6 "2022-10-27T12:46:21Z")

</div>

Browser security wont let you add unsecure content to a secure website.  
Had the same problem with Guacamole VNC recently.

Like Kevin says, reverse proxy like Nginx is the way to solve this. Or upgrade your http site to https.  
You can also open the website in a new tab with a button.