Click here to Skip to main content
15,885,366 members
Please Sign up or sign in to vote.
0.00/5 (No votes)
See more:
Hi,

I have a process implemented in an iFrame.

The problem I have is this process requires a cookie to be written into the iFrame.

I have no control over the iFrame content. The content is cross origin. The content is provided by a third party and does a number of posts/redirects to multiple unknown sources. None of which provide their own p3p policies.

As the owner of the parent content, i.e. the page which implements the iFrame. Is there a setting I can use which will instruct IE to accept all cookies from within the iFrame?

I also don't manage the end users so I can't enforce specific browser security policies either!

Looking forward to hearing from you experts!
Posted
Comments
Wombaticus 9-Oct-14 10:33am    
You can't, is the simple answer. Browser policies on cookies are set by the end user, not the content providers.
Stephen Hewison 9-Oct-14 10:49am    
I thought that was the case. It's just a bit annoying. The user has an agreement with us, we have agreements with our suppliers which are covered in our T&Cs. Why shouldn't we be able to accept the cookie?
Wombaticus 9-Oct-14 11:07am    
Do you really want content providers being able to decide what cookies can and can't be set on your computer? Do you not think that you, as an end user, should have total control over that?
Stephen Hewison 9-Oct-14 12:36pm    
I understand the argument for it. But in a world of multiple service providers integrating into a single solution, to have to individually agree each of the implementation because they're implemented in an iFrame seems excessive. But I guess my real issue is one of our providers is refusing to implement a p3p policy.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900