Hi,

I create an OLAP car report on IP: 172.16.2.10:8080/ibi_apps/ and it run as expected with "ON TABLE SET OLAPPANE TOP" .
And then on another WebFOCUS VM(IP:172.16.2.50) create an simple iframe to run that OLAP car report on 172.16.2.10 but it show error due to CORS security, so I had CORS setting in Administration Console > Security tab marked all check mark and using asterisk(*) for "Allow Origin" .
Turn out OLAP car report did show up in my iframe(172.16.2.50) but NOT the OLAP Panel. It show "Loading please wait" and OLAP report on the browser.
So I check the browser's developer tool on "Console" tab and notice there is several errors include "Uncaught DOMException: Blocked a frame with origin "http://172.16.2.10:8080" from accessing a cross-origin frame. " (Run in Chrome)
So I think something have to do with "web.xml" in Tomcat. and I Add/un-comment following lines:

<filter>
  <filter-name>httpHeaderSecurity</filter-name>
  <filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>
  <async-supported>true</async-supported>
  <init-param>
    <param-name>antiClickJackingEnabled</param-name>
    <param-value>true</param-value>
  </init-param>
  <init-param>
    <param-name>antiClickJackingOption</param-name>
    <param-value>ALLOW-FROM</param-value>
  </init-param>
  
 <init-param>
    <param-name>antiClickJackingUri</param-name>
    <param-value>http://172.16.2.50:8080/ibi_apps/*</param-value>
  </init-param>
		
</filter>

<filter-mapping>
  <filter-name>httpHeaderSecurity</filter-name>
  <url-pattern>/*</url-pattern>
  <dispatcher>REQUEST</dispatcher>
</filter-mapping>

and since I have to use "ALLOW-FROM" which work on Firefox, so I try it on Firefox and getting different Error: "SecurityError: Permission denied to access property "search" on cross-origin object"

I try change "ON TABLE SET OLAPPANE TOP" to "ON TABLE SET OLAPPANE CONTROL" to show as button, and it is same error.

anybody got an idea what is going on with OLAP Panel/button in iframe on CORS?

This message has been edited. Last edited by: FP Mod Chuck,

Nox

I you haven't opened a case with techsupport I suggest you do that since no one has been able to provide you any guidance.

Hi,

I did open a ticket for support, and they take quite some time to do "researching", so trying my luck here to see if anyone got similar experience before?

This message has been edited. Last edited by: nox,