topic Re: Help with SSRS 2019 X-Frame-Options in Report Server

Help with SSRS 2019 X-Frame-Options

KRem — Tue, 15 Nov 2022 23:12:44 GMT

Hi guys, not sure if I am asking this correctly, but we are trying to launch URL links to SSRS2019 reports from a web site.

we previously had SSRS2014 with links that are working, however upgrading to SQL2019 has caused us to

get the following error

Refused to display 'http://devxxxxxxx/' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

I have reviewed this reference Server Properties Advanced Page - SQL Server Reporting Services (SSRS) | Microsoft Learn

which is indicating I need to update the CustomHeaders attribute. I've tried several variants with no success

The best I can get is the following (note I have replaced the URL name with xxxx

<CustomHeaders>
<Header>
<Name>X-Frame-Options</Name>
<Pattern>(?!(http|https):\/\/([^\/]+)\/*xxxxx.*$)</Pattern>
<Value>ALLOW-FROM</Value>
</Header>
</CustomHeaders>

This has then caused the error to

Refused to display 'http://devxxxxxx/' in a frame because it set multiple 'X-Frame-Options' headers with conflicting values ('SAMEORIGIN,ALLOW-FROM'). Falling back to 'deny'.

Is there something I am missing?

Also note I can get the URL working if I add ?rs:embed=true to the end of it, however thats a bit much on all existing URL's

Thanks in advance,

Re: Help with SSRS 2019 X-Frame-Options

v-henryk-mstf — Wed, 16 Nov 2022 08:37:43 GMT

Hi KRem ,

According to this error message, this is because the server is set up to serve the page you are trying to put into the iframe. It does not allow you to put the page into an iframe on another site.

See the following documentation for more information about X-Frame-Options.

X-Frame-Options - HTTP | MDN (mozilla.org)

If the problem is still not resolved, please provide detailed error information and let me know immediately. Looking forward to your reply.

Best Regards,
Henry

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Re: Help with SSRS 2019 X-Frame-Options

KRem — Thu, 17 Nov 2022 00:47:52 GMT

Thanks very much for the reply Henry, you are correct that the SSRS server not set up to allow it to be put into an iFrame and thats the issue I'm trying to find a fix for. ie on the SSRS server, what configuration can I change to allow it to be pulled through by the web application (note both are internal). In PowerBI there is a value in the CustomHeaders attribute that I've used to fix the issue but I'm not sure of the equivalent in SSRS. The reference documentation link here for SSRS server properties: https://learn.microsoft.com/en-us/sql/reporting-services/tools/server-properties-advanced-page-reporting-services?view=sql-server-ver15

indicates that I should be able to set it but I dont seem to be able to work it out. Am I on the wrong path? Cheers!

Re: Help with SSRS 2019 X-Frame-Options

sinch — Tue, 12 Mar 2024 18:47:08 GMT

Hello,

did you get any solution to this one? I am facing the same problem