Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Earn a 50% discount on the DP-600 certification exam by completing the Fabric 30 Days to Learn It challenge.

Reply
KRem
New Member

Help with SSRS 2019 X-Frame-Options

Hi guys, not sure if I am asking this correctly, but we are trying to launch URL links to SSRS2019 reports from a web site. 

we previously had SSRS2014 with links that are working, however upgrading to SQL2019 has caused us to 

get the following error

Refused to display 'http://devxxxxxxx/' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

I have reviewed this reference Server Properties Advanced Page - SQL Server Reporting Services (SSRS) | Microsoft Learn

which is indicating I need to update the CustomHeaders attribute.  I've tried several variants with no success

The best I can get is the following (note I have replaced the URL name with xxxx

<CustomHeaders>
<Header>
<Name>X-Frame-Options</Name>
<Pattern>(?!(http|https):\/\/([^\/]+)\/*xxxxx.*$)</Pattern>
<Value>ALLOW-FROM</Value>
</Header>
</CustomHeaders>

 

This has then caused the error to 

Refused to display 'http://devxxxxxx/' in a frame because it set multiple 'X-Frame-Options' headers with conflicting values ('SAMEORIGIN,ALLOW-FROM'). Falling back to 'deny'.

 

Is there something I am missing?

Also note I can get the URL working if I add ?rs:embed=true to the end of it, however thats a bit much on all existing URL's 

Thanks in advance, 

 

3 REPLIES 3
sinch
New Member

Hello, 

did you get any solution to this one? I am facing the same problem

v-henryk-mstf
Community Support
Community Support

Hi @KRem ,

 

According to this error message, this is because the server is set up to serve the page you are trying to put into the iframe. It does not allow you to put the page into an iframe on another site.


See the following documentation for more information about X-Frame-Options.

X-Frame-Options - HTTP | MDN (mozilla.org)


If the problem is still not resolved, please provide detailed error information and let me know immediately. Looking forward to your reply.


Best Regards,
Henry


If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Thanks very much for the reply Henry, you are correct that the SSRS server not set up to allow it to be put into an iFrame and thats the issue I'm trying to find a fix for.  ie on the SSRS server, what configuration can I change to allow it to be pulled through by the web application (note both are internal).  In PowerBI there is a value in the CustomHeaders attribute that I've used to fix the issue but I'm not sure of the equivalent in SSRS.  The reference documentation link here for SSRS server properties:  https://learn.microsoft.com/en-us/sql/reporting-services/tools/server-properties-advanced-page-repor...

indicates that I should be able to set it but I dont seem to be able to work it out.  Am I on the wrong path?  Cheers!

Helpful resources

Announcements
LearnSurvey

Fabric certifications survey

Certification feedback opportunity for the community.

PBI_APRIL_CAROUSEL1

Power BI Monthly Update - April 2024

Check out the April 2024 Power BI update to learn about new features.

April Fabric Community Update

Fabric Community Update - April 2024

Find out what's new and trending in the Fabric Community.