Child Item

dropbox embedder getting "ancestor violates the following Content Security Policy"

in chrome the console error is:

Refused to frame 'https://www.dropbox.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self'".

in firefox error on page:

Firefox Can’t Open This Page

To protect your security, www.dropbox.com will not allow Firefox to display the page if another site has embedded it. To see this page, you need to open it in a new window.

all domains have been added to app setting: Chooser / Saver / Embedder domains

no external domains have changed.

please advise.

Find more posts tagged with

Developers

Accepted answers

Greg-DB

This should be fixed now. Please let us know if you're still seeing any issues. Thanks!

All comments

Greg-DB

Thanks for the report! We're looking into it and I'll follow up here once I have an update on this.

Greg-DB

This should be fixed now. Please let us know if you're still seeing any issues. Thanks!

justam

Hi, I am trying to embed dropbox files in my app like this <iframe src="<shared_link>" ... > the iframe without using the Embedder and received the same error. Do we have to use Embedder when embedding?

Greg-DB

@justam Yes, we only support embedding Dropbox shared links via the Embedder, not using an iframe directly. Please follow the instructions here for using the Embedder.