12 October 2016, 4:21

Hello

We have an externally hosted Mahara and an externally hosted Media Library.  Last Friday afternoon, some videos embedded on some Mahara pages stopped displaying.  When I edit the pages, the embed code is still there.

We are on Mahara 16.04.3 and we have the Media Library's URLs in the Allowed iFrame Sources setting.

Load denied by X-Frame-Options: (URL to video clip) does not permit cross-origin framing.

Anything I can do about this?

Regards

Marion

12 October 2016, 8:46

Hello Marion,

The X-Frame-Option is a security measure and your media library does not seem to allow embedding in another URL. For more information, please see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options Please check with your server administrators about the options in use for the Media Library.

The security improvement we made in Mahara is listed at https://bugs.launchpad.net/mahara/+bug/1531987

Cheers

Kristina

12 October 2016, 21:57

Thanks Kristina

I believe that is the issue and I think the cross-domain 'activity' has been blocked internally.

Thanks for the reply

Marion