My jira is not shown in iframe

[MJ]

Hi

My jira version is 8.5.0 on windows server

I want to show my jira login page in i frame, but I see connection refused by jira.

I used the steps provided here:

https://community.atlassian.com/t5/Jira-questions/Unable-to-display-Jira-page-in-iFrame/qaq-p/1319333

https://jira.atlassian.com/browse/JRASERVER-38635

https://community.atlassian.com/t5/Jira-questions/Issue-with-opening-JIRA-login-page-in-iFrame/qaq-p/688963

but it doesn't help me.

Is it a bug? and it is not resolved yet?

[Clark Everson]

Hi MJ,

Welcome to the community!

Looking at the bug you linked it looks like they said they aren't fixing it.

Depending on your overall Jira settings (you would need to check with your admin) you may not be able to use iframe. By default iframe is disabled in Jira and only a jira admin (maybe a system admin, can't remember off the top of my head) can enable it.

However, there are known security issues with iframe so your security team may not have approved it.

Also if your company is looking at migrating to cloud there is no iframe features so if that's the case I would also suggest looking for other avenues.

Best,

Clark

[MJ]

Hi Clark,

thanks for the reply.

How can I enable it in jira setting. I have admin access?

@Clark Everson 

[Clark Everson]

Hi MJ,

I would look here https://confluence.atlassian.com/jirakb/security-headers-in-jira-939919914.html and beyond that reach out to support as I see many issues around this topic that were never answered over the years.

However opening up iframe also opens your site upp to xss attacks and others as well.

Best,

Clark