Embedded Pages and X-Frame-Options - Embedded Pages and X-Frame-Options - OnBase - Technical Requirements Overview for New Installations and Upgrades - OnBase/Technical-Requirements-Overview-for-New-Installations-and-Upgrades/Foundation-24.1/Technical-Requirements-Overview-for-New-Installations-and-Upgrades/Part-2-Support-Items-of-Note/General-Support-Items/Web-Server/Embedded-Pages-and-X-Frame-Options - Foundation 24.1 - Foundation 24.1

Technical Requirements Overview for New Installations and Upgrades

Platform
OnBase
Product
Technical Requirements Overview for New Installations and Upgrades
Release
Foundation 24.1
License
Premier
Standard
Essential
ft:lastPublication
2025-12-04T00:01:30.442000
ft:locale
en-US

As of OnBase Foundation EP1, the Web Server is configured by default to require that embedded pages (such as in a frame or iframe) must come from the same domain as the parent page. If your solution includes embedding content from the Web Server into a different domain, you can change the X-Frame-Options setting in the Web Server web.config file to allow embedding Web Server content into a specified URI. For more information on configuring the X-Frame-Options header and how each Web browser supports it, consult an HTTP reference.