JS Challenge in iframe

Security
#1

Hello. I used to embed the my player via an iframe. Links to videos are parsed there and I wanted to enable JS Chalenge to check users, but it does not work in the iframe.

What I already googled and tested:

  1. When JS challenge is x-frame-options which disables embedding, I removed this header via “HTTP Response Header Modification rule”.
  2. It began to write that need to enable cookies. For cookies to work in an iframe, need to pass “SameSite=None; Secure” to the cookie, which Cloudflare doesn’t do.

How can I solve this problem?

#2

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.