IBM Support

iFrame Widget Error in IBM Sterling Call Center due to Content Security Policy

Troubleshooting


Problem

When attempting to launch an iFrame widget in IBM Sterling Call Center to embed an external application, the following error may occur.
Refused to frame <external URL> because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self'

Symptom

If the external URL being tested has a restriction, the page content will not be displayed within the iFrame widget.

Cause

This error occurs when the content from the external application is prohibited from being displayed within an iFrame due to the Content Security Policy configured for that URL domain. The webserver hosting the external URL is configured to add a HTTP header "Content-Security-Policy" with value frame-ancestors 'self', preventing pages belonging to the above domain to be embedded to the iFrame.
 

Diagnosing The Problem

One can test this by accessing the external URL from the browser and checking the Header for the content security policy set in the browser network tab

Resolving The Problem

When configuring the iFrame widget in the Call Center application, it is essential to consider the restrictions imposed by the external URL being embedded. Some websites, such as Google or Yahoo, have policies in place that prevent them from being embedded in an iFrame contained in a different application.
https://www.ibm.com/docs/en/call-center/10.0?topic=screens-iframe-widget
To resolve this issue, ensure that the necessary web sites do not impose such restrictions, i.e. configure the external URL to allow embedding in an iFrame by setting the appropriate Content Security Policy (CSP) directives.

Related Information

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB59","label":"Sustainability Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SS6PEW","label":"IBM Sterling Order Management"},"ARM Category":[{"code":"a8m0z000000cxzVAAQ","label":"Call Center Store and SIM"}],"ARM Case Number":"TS016180890","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
23 May 2024

UID

ibm17154784