Unable to embed IFRAME content into ITGlue

[orangevan]

Preflight Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for a feature request that matches the one I want to file, without success.

You must agree to search and the code of conduct. You must fill in this entire template. If you delete part/all or miss parts out your issue will be closed.

If you are technical, you should reporting bugs along the lines of https://marker.io/blog/how-to-write-bug-report. If you are not technical, we will make allowances, please try to make an effort to understand the process.

Describe the bug When embedding a diagram via File ->Embed -> Iframe and copying the source, then embedding into an ITGlue record, the content does not load. The browser has the following error.

Refused to frame 'https://app.diagrams.net/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self' https://teams.microsoft.com https://*.cloud.microsoft".

If i edit the content for the IFRAME to use VIEWER.DIAGRAMS.NET instead of APP.DIAGRAMS.NET it works fine. (i was running an older desktop version that the IFRAME EMBED code generated VIEWER URLs instead of APP. If i adjust the URL by hand it works fine.

To Reproduce Steps to reproduce the behavior:

1. Click File -> Embed -> Iframe -> Create
2. Click COPY
3. Embed into iframe on ITGlue (or anywhere except teams it appears based on error)
4. Attempt to View

Expected behavior The diagram should be visible in the ITGlue record as it is when using Viewer URL in iframe.

Screenshots If applicable, add screenshots to help explain your problem.

draw.io version (In the Help->About menu of the draw.io editor):

• draw.io version 24.6.1

Desktop (please complete the following information):

• OS: Windows 11
• Browser Chrome
• Browser Version 126.0.64

I tested the problem in incognito/private mode with all browser extensions switched off, write "yes" below: No due to ITGLUE functions i can't do this.

Additional context Perhaps on the EMBED IFRAME there should be a toggle to use APP or VIEWER?

[theitsolutionsbv]

I have the same issue when embedding iframe to SharePoint.

I used the app.diagrams.net website to open diagram from OneDrive, Share diagram with Anyone, then generate IFRAME code to embed into SharePoint page. I always got "app.diagrams.net refused to connect" error message.

Thanks @orangevan for your findings with VIEWER instead of APP. The view of the diagram is generated now at least. However, I still have a problem that it requires authentication first, even though it is shared with Anyone. :'(

[tm904]

By replacing app->viewer in the following part : "src="https://app.diagrams.net/?tags[...]" you can "fix" the problem

[github-actions[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. See the FAQ for more information.