I’m having an issue loading content within an iframe on a mobile browser app. Desktop browsers load as expected. (It also works on Edge mobile emulator)
The iframe content does not load at all. However, if I directly hit the iframe link in a new tab, and come back and refresh the app that has the iframe, it loads as expected.
I’ve tried to look at the console log on mobile by accessing edge://inspect, however, it’s not showing any errors or useful logs.
I’ve tried updating the content security policy, but it hasn’t had any affect. For now there is a workaround when we launch a new tab with the iframe url and close it immediately and refresh the page, but it’s a poor user experience.
Here is the current CSP of the parent app:
script-src 'self' *.example.net *.example.com 'unsafe-eval' 'unsafe-inline';
style-src 'self' *.example.net 'unsafe-eval'
font-src 'self' *.example.net https://*example.net:* 'unsafe-inline' data:;
default-src 'self' *.example.net *.example.com
frame-ancestors *;
object-src 'self' https//*.example.net: https://*.example.com:* 'unsafe-eval' 'unsafe-inline' blob:;
frame-src 'self' https//*.example.net: https://*.example.com:* 'unsafe-eval' 'unsafe-inline'
img-src 'self' https://*.example.net:* 'unsafe-inline' data:
To access each of these sites individually we have a sign in service that stores a cookie to grant session access. Not sure if that is affecting the content not being loaded from parent to child
mikan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.