#webpage card not working for sites outside the network

1 messages · Page 1 of 1 (latest)

tall hull
#

i recently tried using the webpage card on my HA instance, but it said "connection rejected" on every website except local ones (like the router, or some self-hosted things, including the HA instance itself)
I don't know if it is a bug or it is supposed to do that, but i need to be able to put a webpage inside the dashboard to control some of my devices

cerulean tiger
#

and it worked fine

#

as the docs say, if you're accessing your HA instance using https and you're trying to embed an http:// site, it won't work

#

if that's what you're trying to do

tall hull
#

i am on http://[ip]:8123 and trying to access https://

cerulean tiger
#

so does the example not work for you?

tall hull
#

"we couldn't find the ip for [website]"

cerulean tiger
#

that's not a valid name

#

perhaps you wanted music.youtube.com

#

you can try that in a regular browser

#

so is your issue with "anything", or just with that?

#

I get the same thing when I try to embed the correct URL. Perhaps it doesn't like being in an iFrame

#

Looks like this is the issue:

#

The X-Frame-Options header with the value SAMEORIGIN restricts a webpage from being displayed in an iframe (or similar frame) unless the iframe is on the same origin (domain, protocol, and port) as the page itself. This mechanism helps prevent clickjacking attacks, where malicious websites might try to embed a legitimate site's content within their own to trick users.

#

not sure what, if anything, you can do about that

#

at least you have something to research

tall hull
cerulean tiger
#

see the rest of what I wrote

tall hull
cerulean tiger
#

it's not specific to HA

tall hull
#

still

#

why would someone clickjack music

cerulean tiger
#

it doesn't let anyone view it in an iFrame