Personal confidence page through the IFrame nested third party page, domain name is different, call the third party interface, in Chrome test normal, in Internet Explorer is embedded in the page Session invalidation. (Session is based on cookie implementation, reference page is not allowed to use cookie)
Problem analysis:
The IE-supported P3P(Platform for Privacy Preferences Project (P3P) Specification) protocol by default prevents third party cookies without Privacy security claims, and Firefox does not currently support P3P security features, nor does it naturally exist in Firefox.
Solutions:
1. Modify the setting of the Client
so that the Client can accept cookies from any website (specifically set in the privacy page of IE option to add B site to the trusted site)
or set both domains to the trusted site2. The domain of the application modifies the
simple scheme: two applications use the same domain
Complex solution: you can force changes tothrough setdomain in pages loaded by the iframe. 3. P3P
first: output the host header declaration of P3P in the content to be embedded (the site the iframe points to) as follows:
Open IIS Manager InetMgr to be embedded in the iFrame source site or directory, right-click to open the Properties box and toggle to HTTP headers Add custom HTTP headers P3P Custom HTTP headers CP=”CAO PSA OUR” Close the properties box and exit, effective immediately
Response.addheader (“P3P”,”CP=CAO PSA OUR”);
Transfer: https://www.cnblogs.com/weibozeng/archive/2013/11/06/3410904.html
Read More:
- JS error: permission denied to access property ‘document’— document.domain -The same source strategy of JavaScript
- What are the web front end technologies? What are the differences between cookie and session
- Some uncommon problems and solutions of cookie
- Three ways of adding cookie by scratch
- Illegalargumentexception error when adding cookie to response
- Urllib2.httperror: http error 403: forbidden solution
- session_ start(): open(SESSION_ FILE, O_ Rdwr)) failed: processing of permission denied (13)
- Illegalargumentexception: control character in cookie value or attribute tomcat7
- EBS R12 login error—R12.1 FRM-92050: FAILED TO CONNECT TO SERVER: /FORMS/LSERVLET
- To solve the problem of failed to load: data in HTML5 game running rmmv locally/ actors.json problem
- Parsing the exception of storing JSON string in cookie
- python:urllib2.URLError urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed
- Ie8.0 reports Oracle error 1403 error after logging into Oracle EBS
- Uncaught domexception: failed to read the ‘contentdocument’ property from ‘htmliframeelement’
- CSRF verification failed. Request aborted.
- firefox ssl_error_unsupported_version
- JS opens a new tab( window.open Application)
- HTTP error 401 and 403 detailed explanation and solution
- firefox sec_error_untrusted_issuer
- Exception ignored in: bound method basesession__ del__ Of