CODEWITHSUNDEEP
htmlmailto
Leon
Leon

Reputation: 413

mailto X-Frame-Options error

i got following error when i click on mailto: link in colorbox. its work without color box, but unfortunately i need to use color box.

i tried header('X-Frame-Options: GOFORIT'); but it does't work. and it show following error message in console.

 Refused to display document because display forbidden by X-Frame-Options.

Any idea?

Upvotes: 0

Views: 832

Answers (2)

Anthony
Anthony

Reputation: 37065

I've never messed with X-Frame-Options (though I did work directly for the guy that wrote the book on clickjacking). According to Mozilla, there are only two acceptable values:

  • DENY
  • SAMEORIGIN

And these are returned by the iframed source server, which it sounds like you have control over. Both of which are defensive, not permissive.

What happens if you turn off the header outright?

Also, to avoid issues with users who use their web mail client (like me) who may not want to leave the colorbox or have the webmail client bound in an iframe, try setting target="_blank" on the link. Perhaps escaping the iframe will alleviate other issues.

Upvotes: 1

Jack
Jack

Reputation: 9548

Some sites forbid their pages from being displayed in an iframe. If that is the situation you are running into, then there isn't much that can be done. However, I would not recommend trying to colorbox an mailto link, as you have no control over how a visitors handle those kinds of links.

Upvotes: 0

Related Questions