This thread is over two years old and may be outdated. Please create a new thread if you need help, or email us if you have an active Premium license.

The XSS Auditor blocked access

9 years ago · Last reply by Rafaël De Jongh 8 years ago

Using SiteOrigin Page Builder on my new website I can not go into the Live View as it gives me the following error in the console:

The XSS Auditor blocked access to 'http://188.166.94.70/?siteorigin_panels_live_editor=true' because the source code of a script was found within the request. The auditor was enabled as the server did not send an 'X-XSS-Protection' header.
Uncaught DOMException: Failed to read the 'contentDocument' property from 'HTMLIFrameElement': Blocked a frame with origin "http://188.166.94.70" from accessing a cross-origin frame.
    at contents (http://188.166.94.70/wp-admin/load-scripts.php?c=0&load%5B%5D=jquery-core,j…ble,editor,jquery-ui-butt&load%5B%5D=on,jquery-ui-dialog&ver=4.7.2:2:26887)
    at Function.map (http://188.166.94.70/wp-admin/load-scripts.php?c=0&load%5B%5D=jquery-core,j…able,editor,jquery-ui-butt&load%5B%5D=on,jquery-ui-dialog&ver=4.7.2:2:3613)
    at a.fn.init.n.fn.(anonymous function) [as contents] (http://188.166.94.70/wp-admin/load-scripts.php?c=0&load%5B%5D=jquery-core,j…ble,editor,jquery-ui-butt&load%5B%5D=on,jquery-ui-dialog&ver=4.7.2:2:27001)
    at HTMLIFrameElement.<anonymous> (http://188.166.94.70/wp-content/plugins/siteorigin-panels/js/siteorigin-panels-24.min.js?ver=2.4.24:3:8245)
    at HTMLIFrameElement.dispatch (http://188.166.94.70/wp-admin/load-scripts.php?c=0&load%5B%5D=jquery-core,j…ble,editor,jquery-ui-butt&load%5B%5D=on,jquery-ui-dialog&ver=4.7.2:3:12444)
    at HTMLIFrameElement.r.handle (http://188.166.94.70/wp-admin/load-scripts.php?c=0&load%5B%5D=jquery-core,j…able,editor,jquery-ui-butt&load%5B%5D=on,jquery-ui-dialog&ver=4.7.2:3:9173)
    at Object.trigger (http://188.166.94.70/wp-admin/load-scripts.php?c=0&load%5B%5D=jquery-core,j…ble,editor,jquery-ui-butt&load%5B%5D=on,jquery-ui-dialog&ver=4.7.2:3:11573)
    at Object.a.event.trigger (http://188.166.94.70/wp-admin/load-scripts.php?c=0&load%5B%5D=jquery-core,j…able,editor,jquery-ui-butt&load%5B%5D=on,jquery-ui-dialog&ver=4.7.2:9:8275)
    at HTMLIFrameElement.<anonymous> (http://188.166.94.70/wp-admin/load-scripts.php?c=0&load%5B%5D=jquery-core,j…ble,editor,jquery-ui-butt&load%5B%5D=on,jquery-ui-dialog&ver=4.7.2:3:18991)
    at Function.each (http://188.166.94.70/wp-admin/load-scripts.php?c=0&load%5B%5D=jquery-core,j…able,editor,jquery-ui-butt&load%5B%5D=on,jquery-ui-dialog&ver=4.7.2:2:2881)

Does anyone know how to fix this?

Thanks for any information in advance!

This is our free support forum. Replies can take several days.

Need fast email support? Get SiteOrigin Premium

Replies

3
  1. Rafaël De Jongh 8 years, 9 months ago

    This problem was caused by an YouTube Iframe tag, for some reason this only appeared in Chrome and I really did not understand to why this was happening.

    Removing the Iframe did fix this problem, but it was a shame as I then couldn’t directly include Iframe tags and use the live editor.

  2. Alex S Staff 8 years, 9 months ago

    Hi Rafaël,

    Oh! Sorry, somehow we missed this issue. Regardless, this should be fixed in the latest version of SiteOrigin Page Builder – is this issue still occurring for you?

  3. Rafaël De Jongh 8 years, 9 months ago

    Hi there Alex,

    No problem, after finding out that it was that Iframe I indeed did not have any problems with it anymore, and even now with the latest version I’ve yet to run into such a problem with iframes either.

    So I think it’s good! Thanks for the comment!

Replies on this thread are closed.

Please create a new thread if you have a question, or purchase a SiteOrigin Premium license if you need one-on-one email support.

Have a different question or issue?

Start New Thread