Is there a way to create my own embed iFrame header?

[Harlequin]

Hi,

Just wondering if there is a way for me to use iFrame to embed my anvil app into one particular WordPress website?

I know the Publish app has a checkbox to allow embedding outside of anvil.works, but that option is broad. It allows my anvil.app to be embedded on any domain.

I am creating an app that I want to embed within a WordPress website and I only want that WordPress website to be allowed to show my anvil.app within an iFrame.

I think I can achieve this by adding my own header, using the Content-Security-Policy: frame-ancestors…

So is it possible for me to Bypass the anvil embed option and create my own header policy? And if so, where would I put this header and in what format? I am assuming it might be something I can upload into the assets area.

Thanks!

[tomherden]

Hello @Harlequin

I don’t know the answer to the question in your Subject line, but the following post contains clone links to an example app (Luke Skywalker) that allows embedding but supports varied responses to different embedding sites (with additional clone app examples for Ben Kenobi, Darth Vader, and “all other” websites.)

Accessing URL of page/site hosting an embedded Anvil app

Thank you very much, @jshaffstall, for the explanation, the Javascript call that works in most browsers, and the link to caniuse! I case it’d help anyone in future to see a simple worked example, the following table contains links to an app with Embedding enabled, and examples of how it presents differently when embedded within sites that have been Allowed, Forbidden, or are Unknown. Role App Clone link Luke https://luke-skywalker.anvil.app/ Anvil | Login Ben Kenobi https://ben-kenob…

Unfortunately, to get the HTTPS and domain this approach uses a Javascript function that is not presently supported on either desktop Firefox or Android Firefox…

[Harlequin]

@tomherden

HTTPS and domain

Hi @tomherden

Thank you for this . I will experiment and try to cobble something together.

[meredydd]

Hi @Harlequin,

Although there are workarounds, I’ve moved this to Feature Requests because that would be neat!

[Harlequin]

Thanks @meredydd That would be fantastic!