Problem displaying Confluence pages in browsers

[Administrateur]

Hello,

We've noticed that when our customers perform a search on our JIRA portal, it suggests links from our Confluence knowledge base. However, when the customer clicks on the link, the Confluence page opens in an iframe. For some time now, we've observed that browsers block this display for security reasons.

The following message appears in the browser console:

Refused to frame 'https://xxxx.xxx.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self'."

Is there a solution to this problem?

Would it be possible to open the Confluence page directly in a new tab, which I suppose would solve the problem?

Thank you in advance for your help.

Best regards,

[Tanya Rosario · Accepted solution]

Hello,

To resolve the issue of Confluence pages being blocked from loading in iframes on the JIRA portal due to Content Security Policy (CSP) restrictions, you can adjust the CSP settings on your Confluence server. Specifically, add the domain of your JIRA portal to the frame-ancestors directive in the CSP header. This modification will allow Confluence pages to load within iframes on the JIRA portal without triggering security warnings. Alternatively, you can configure the links in the JIRA portal to open Confluence pages directly in a new tab, bypassing the need for iframes and avoiding CSP restrictions altogether. This solution ensures a seamless browsing experience for your customers accessing Confluence knowledge base links from the JIRA portal.

Best Regard,
tanya635rosario
myloweslife

[Administrateur]

Hi Tanya,

Thank you very much for your response. Indeed, opening a new tab would probably provide a better user experience. Do you know how I can set this up ?

Best regards,