Allowing iFraming For A Customer

Allowing iFraming For A Customer

If a customer needs/wants to iFrame one of our sites, follow these steps.

Background:

Our new pages (/booking, /cs-registration, etc) injects a header option that prevents the page from being iFramed. We need to adjust this injection to allow only 1 site at a time. So if they are testing first, you have to allow their test domain and replace that with their live site later.

This change will allow iFraming from only 1 site

Booking:

1. Go to <c:/ClubSpeedApps/booking/laravel/vendor/laravel/framework/src/illuminate/http/>
2. Make a copy of FrameGuard.php
3. Open the original FrameGuard.php file and go to line 40 where you should find this line:
   1. $response->headers->set('X-Frame-Options', 'SAMEORIGIN', false);
4. Update that line to show:
   1. $response->headers->set('X-Frame-Options', 'ALLOW-FROM https://trackWebSite.com/', false);
5. Save the file
6. Go to the tracks /booking site to make sure it is still working properly (if the syntax is wrong, it can break the site)

CS-Registration (Get approval before doing):

1. Go to <c:/ClubSpeedApps/cs-registration/laravel/bootstrap/>
2. Make a copy of compiled.php
3. Open the original compiled.php file and go to line 1137 where you should find this line:
   1. $response->headers->set('X-Frame-Options', 'SAMEORIGIN', false);
4. Update that line to show:
   1. $response->headers->set('X-Frame-Options', 'ALLOW-FROM https://trackWebSite.com/', false);
5. Save the file
6. Go to the tracks /cs-registration site & go to iPad registration to make sure that still works to make sure it is still working properly (if the syntax is wrong, it can break the site)

Related Articles