Hi all,
I’m trying to put the main site into an iframe within the application I’m working on. Essentially we have some widgets that allow calls/chats interactions and can build hubspot related objects through the api for these agents.
However, instead of opening a new window to view said objects, I was iframing the hubspot experience within the application. This was working just fine outside the login for a while, where users can login outside the browser tab and come back to browse the dashboards and dashboard library main page.
About ~5 months ago, I noted we started to see the error below. Is there a security setting I can set on the app to allow it to be iframable? I saw Hubspot has form html within an iframe, but that’s not really the usecase I’m trying to solve here. If users can see the objects I created through the api along with being able to click on other dashboards that would be ideal.
Refused to frame 'https://app.hubspot.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self' app.hubspot.com".
Hi, @jrac Thanks for the question! Hey, @Anton@tominal@RomanGruit do you have any thoughts about next steps or how @jrac might approach troubleshooting this?
Honestly no, we ended up scrapping the support for this with hubspot. The problem would be that hubspot would have to have a config to allow us to be a valid parent/ancestor to the iframe. That level of security wasn’t there before, but after it was added, it breaks completely unless that is allowed/fixed.
embedding something with an iFrame is the easiest way for sure - but not recommended (and most times not working).
When working on your application - would building your Chat with the Chat Widget SDK be an option? This would give you the chat functionality. For calls (I assume phone calls) you could go with the Calling SDK.
Hi Anton, thanks for the reply. Generally I’ve seen some settings to add to that native ancestor to allow iframing in other apps. It’s a security setting that gets set that allows this functionality outside Hubspot controlled applications. I was wondering if there was such a thing available anywhere or if that was internally available that I’d have to ask about to get access to.
Embedding the chat/call widgets provided by Hubspot sdk’s are not ideal. I already have api handling with call/chat adapters on the site. The intention of the iframing was to redirect to the appropriate pages within hubspot in these interactions. Not to have the adapters from Hubspot in this app.
Thanks for the question! Hey,