none
IIS IE IFrame issue RRS feed

  • Question

  • OS: Server 2008 R2 - SP1

    IIS: 7.5.7600.16385

    I have an iframe embedded into a web page which displays a pdf.  In chrome and other browsers the pdf displays fine inside the iframe; however, in IE the iframe forces a logout after redirecting them several times.  Chrome also does this redirect but doesn’t end up forcing a logout.  Copying the source url from the iframe into a new tab in IE doesn’t force the logout and retrieves the pdf just fine which means it is directly related to this server’s handling of iframes specifically in all IE browsers we support (IE 9+).  This scenario is unique to a specific server and doesn’t happen on ‘identical’ server environments.

    I have used Process Monitor and am not seeing any permission errors or anything that immediately stands out.  If you have any thoughts on how to proceed or have any questions, please let me know.

    I have also looked into KB 3154070 without success.

    Tuesday, March 27, 2018 1:10 PM

All replies

  • Hi is null (yep! nullius en verba),

    You did not mention:

    1. The address of the website where the pdf document is hosted in an iframe.. If it is a company website (Intranet), please mention as such.

    2. The address of the website where the PDF document is stored... IE has security restrictions for embed content and navigation into a zone of lower integrity. You should not link content on intranet sites to internet mapped websites. Add any domains that you require access from your intranet sites to the Trusted sites list, using the wildcard notation (eg. *.Microsoft.com) (note: you also need to add *.live.com to negotiate MS single sign on credentials.

    Tools>Internet Options>Security tab,

    click "Reset all zones to default"

    Trusted sites icon, 'Sites' button.... use the wildcard notation for the domain where your pdf documents are hosted stored, so that it can negotiate credential management.

    To debug web page security and blocked content issues first go

    Tools>Internet Options>Advanced tab, check "Always record developer console messages". Save changes.

    .... navigate to your test/production website, and then press f12 to display the dev tool>Console tab....

    Regards.

    Questions regarding Internet Explorer 8, 9 and 10 and Internet Explorer 11 for the IT Pro Audience. Topics covered are: Installation, Deployment, Configuration, Security, Group Policy, Management questions.

    stackoverflow.com is a good place to post questions about html, css and scripting for website developers...!include a link with your questions.


    Rob^_^


    Tuesday, March 27, 2018 9:54 PM
  • Thank you for your quick response.  Please see responses in red.

    1. The address of the website where the pdf document is hosted in an iframe.. If it is a company website (Intranet), please mention as such. 

    Yes, the pdf hosted is accessible via only intranet. While the parent page is external facing.

    2. The address of the website where the PDF document is stored... IE has security restrictions for embed content and navigation into a zone of lower integrity. You should not link content on intranet sites to internet mapped websites. Why? Add any domains that you require access from your intranet sites to the Trusted sites list, using the wildcard notation (eg. *.Microsoft.com) (note: you also need to add *.live.com to negotiate MS single sign on credentials.

    Tools>Internet Options>Security tab,

    click "Reset all zones to default"

    Trusted sites icon, 'Sites' button.... use the wildcard notation for the domain where your pdf documents are hosted stored, so that it can negotiate credential management.

    To debug web page security and blocked content issues first go

    Tools>Internet Options>Advanced tab, check "Always record developer console messages". Save changes.

    .... navigate to your test/production website, and then press f12 to display the dev tool>Console tab....

    Did this and nothing is being displayed in the console with the same effect of a forceful logout.

    Regards.

    Questions regarding Internet Explorer 8, 9 and 10 and Internet Explorer 11 for the IT Pro Audience. Topics covered are: Installation, Deployment, Configuration, Security, Group Policy, Management questions.

    stackoverflow.com is a good place to post questions about html, css and scripting for website developers...!include a link with your questions.

    Wednesday, March 28, 2018 7:55 PM