We are implementing External Identity for our website. We ran into an issue with Cross site scripting where Safari users get an error :
"Refused to frame 'https://roadscholar.force.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self' *.salesforce.com *.force.com *.visualforce.com *.documentforce.com". frame-ancestors 'self' *.herokuapp.com *.roadscholar.org;"
Other browsers work fine and disabling the blocking of 3rd party cookies will help. The Embedded login on our website in a hidden iframe.
Is there anything someone has used to bypass the 3rd party cookie issue with embedded login specially with the Safari browser?
Thank You,
Brian
I'm getting the same issue, Have any solution for an external website?
[Report Only] Refused to frame 'https://cloudanalogy-6de-dev-ed.my.salesforce.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self' *.salesforce.com *.force.com *.visualforce.com *.documentforce.com".
