Scriptcase app_login in WebView

Scriptcase 9 General
#1

Hello,

I’m trying to open my Scriptcase login page (app_login) inside a mobile app WebView, but I get the following error in Firefox and other browsers:

Firefox Can’t Open This Page
To protect your security, will not allow Firefox to display the page if another site has embedded it.

I understand this is caused by X-Frame-Options: SAMEORIGIN being sent by Scriptcase, which blocks embedding in iframes or WebViews.

Question:

  • How can I safely disable or override this header for app_login?
  • Is there a recommended way to allow WebView/mobile app access to Scriptcase login?

Thanks in advance!

#2

I tried this in .htaccess but problem still persist

Header always unset X-Frame-Options Header always unset Content-Security-Policy Header always set Content-Security-Policy "frame-ancestors *"
#3

No one have solution for this?

#4

Solved: Using the full link doesn’t work. You need to point directly to /app_Login.

Example:
Instead of:
http://yourdomain.com/project_name/
Use:
http://yourdomain.com/project_name/app_Login/