search

trustpilot / plugin-prestashop

Prestashop plugin for sending invitation data to Trustpilot & adding TrustBoxes
https://www.trustpilot.com/
MIT License
2 stars 4 forks source link

Blocked a frame with origin... #3

Closed adrianchuuk closed 4 years ago

adrianchuuk commented 4 years ago

Hi guys,

Installed this module in PrestaShop 1.6.x.x and all fine until I try to log in to configure parameters, it automatically logs me out with the following error in console:

Blocked a frame with origin "https://ecommscript-integrationapp.trustpilot.com" from accessing a frame with origin "https://www.domain.uk". Protocols, domains, and ports must match.

There is no CSP in place on this domain.

vilgro commented 4 years ago

Hey @adrianchuuk Are you running on a domain that is registered on Trustpilot as well? Does your Prestashop back office going over HTTPS?

adrianchuuk commented 4 years ago

Hi @vilgro it's a claimed domain, yes.

Yes on HTTPS.

vilgro commented 4 years ago

@adrianchuuk can you please drop an email to apps@trustpilot.com? (with your domain name and screenshot with error)

adrianchuuk commented 4 years ago

Sent just now including and screen capture video.

arunas-stonis commented 4 years ago

It usually happens because of X-Frame-Options or Content-Security-Policy headers are not allowing our plugin to load the site in iFrame. You can temporary disable these headers while setting up the plugin.

adrianchuuk commented 4 years ago

No such headers in nginx. Works fine in other browsers, like Firefox, doesn’t work on Safari.

Regards,

Adrian

On 21 Aug 2020, at 09:05, arunas-stonis notifications@github.com wrote:

It usually happens because of X-Frame-Options or Content-Security-Policy headers are not allowing our plugin to load the site in iFrame. You can temporary disable these headers while setting up the plugin.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/trustpilot/plugin-prestashop/issues/3#issuecomment-678104943, or unsubscribe https://github.com/notifications/unsubscribe-auth/AQGQI3ZZ2RR2QID4HS27HM3SBYTDHANCNFSM4OSZYVIA.