External domain iframe requests blocked for SharePoint Online

Question

Can anyone help me figure out what settings need to be changed, or any authorization process so I can create an external domain iframe into SharePoint Online? Are there any work arounds? I need to display some SharePoint wikipages. Any help is greatly appreciated.

Answer 1

Hi HallieGromek,

Based on your description, we'd like to check whether you want to create an external domain iframe into SharePoint Online or connect SharePoint Online wikipage to the external domain.

If you want to create an external domain iframe into SharePoint Online, you can go to Site Settings > Site Collection Administration > HTML Field Security to change the permission to allow external iframes.

For more information, you can refer to this article: Allow or disallow iframes for a site collection.

[Updated by Tisky Zheng MSFT, 07:38 AM, Jun 14, 2017(UTC)]

Regards,

Tisky

Answer 2

That probably won't help - Msft blocks external url content via a header xframe option you can't change. I have the html field security set to allow iframing any domain but it makes no difference. You can try googling for the meta tag to allow iframes and insert it in a  master page but you may find this is one of the limitations of using a poorly designed product like sharepoint.

Answer 3

The HTML field security allows you to IFrame within Sharepoint, however I need to connect SharePoint on an external domain. Is there any type of work around. I have tried the ALLOWFraming option and the page didn't function correct after it? Is there any work arounds?

Answer 4

"The HTML field security allows you to IFrame within Sharepoint..."

You would think so, but not external domains, despite the inaccurate settings description. You can however embed youtube videos in an iframe, so there's simply no consistency in Msft's approach as usual. If support here thinks it works, perhaps they could post a screenshot for us.

With html security settings set like this:

Permit contributors to insert iframes from any external domain into pages on this site.

Here's what I get when inserting iframes to google and youtube - with google being the blank space on top:

Answer 5

Hi Hallie,

Thanks for your reply.

Based on your description, if you want to embed SharePoint Online page to an external domain, then it is not feasible to do this. Because it is blocked by an xframe header.

Thanks for your understanding.

Tisky