How can I allow my CP page to be displayed in an iframe on a specific site?

Environment

Customer Portal (CP)
Oracle B2C Service - August 2017

Resolution

When allowing a Customer Portal (CP) page to be displayed in an iframe on a certain site (not on all sites), the standard utils/Clickjackprevention widget has to be customized by adding the "allow_from" attribute to the code.

However, when setting the value for this attribute, one must consider what type of URL is provided as a value.  For instance, a code such as:

<rn:widget path="utils/ClickjackPrevention" allow_from="https://www.domain.com" />

will not work.

The value set has to be in the form of "www.domain.com" and the code should look like:

<rn:widget path="utils/ClickjackPrevention" allow_from="www.domain.com/" />

<rn:widget path="utils/ClickjackPrevention" allow_from="*.domain.com/" />

The utils/ClickjackPrevention widget will automaticly append the HTTP/HTTPS

Should the above all_from fail, this convention may also be helpful.

<rn:widget path="utils/ClickjackPrevention" allow_from="domain.com/" />