VK Iframe : Firefox can't open this page

[Jean-Baptiste-Lasselle]

The VK iframe has an error on https://radiojaune.com :

• why ? i need answer to that
• what fix can i apply ? that's another qwuestion

I found the why on forums :

If you are trying to add this Iframe on a SSL-encrypted website (https://), it won't work any more since Firefox 23 because Mozilla has decided to blocked all unencrypted content on encrypted websites (for example http-iframes on https-websites). You can change this behaviour in your own Firefox installation by typing about:config in the address bar and setting security.mixed_content.block_active_content to false

Ok, now VKontakte proposes only an iframe for websites integration : so how can i display VKontakte videos?

[Jean-Baptiste-Lasselle]

Ok, so after a little reading :

• I think by setting HTTP response Headers, like X-Frame-Options https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options , we can make firefox accept loading vkontakte iframe embedded player
• https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
• so the question would be : is there a possibility to set such headers in surge.sh and in github pages
• for surge.sh, on setting http response headers :
  • https://github.com/sintaxi/surge/issues/165
• for github pages, on setting http response headers :

Ok, to test if setting Http Response Headers changes something, i will use an Heroku deployment, and / or, I could use a private home deployement, but with DNS configuration in /etc/hosts

[Jean-Baptiste-Lasselle]

so all in all, for the moment i think most likely that cause of issue is a HTTP Headers server configuration :

• the https://vk.com servers configuration
• the https://radiojaune.com servers imo what makes sense is that the issue is about the vk server configuration. If so, we could still have a workaround :
• we reverse proxy the https://vk.com website via https://proxy.radiojaune.com
• we configure reverse proxy so that it changes HTTP response Headers to what we need
• and in the website html, we refer to url of embed through reverse proxy ..