Embedded Pages and X-Frame-Options - Technical Requirements Overview for New Installations and Upgrades - Foundation 24.1 - Foundation 24.1 - Ready - OnBase - Premier - external - Standard - Essential - Premier - Standard - Essential - OnBase/Technical-Requirements-Overview-for-New-Installations-and-Upgrades/Foundation-24.1/Technical-Requirements-Overview-for-New-Installations-and-Upgrades/Part-2-Support-Items-of-Note/General-Support-Items/Web-Server/Embedded-Pages-and-X-Frame-Options - 2025-12-04

Technical Requirements Overview for New Installations and Upgrades

Platform
OnBase
Product
Technical Requirements Overview for New Installations and Upgrades
Release
Foundation 24.1
License
Premier
Standard
Essential
ft:locale
en-US

As of OnBase Foundation EP1, the Web Server is configured by default to require that embedded pages (such as in a frame or iframe) must come from the same domain as the parent page. If your solution includes embedding content from the Web Server into a different domain, you can change the X-Frame-Options setting in the Web Server web.config file to allow embedding Web Server content into a specified URI. For more information on configuring the X-Frame-Options header and how each Web browser supports it, consult an HTTP reference.