Re: alternative to <iframe>

[Rob <rob.couch@xxxxxxxxxxxxxx>]

I agree with Nathan.

    Simply get the contents of the page and display in a DIV or any 
other suitable control of your choosing.

    I do it every day with out a problem.  Well, sometimes I have to 
use CURL for those sites that attempt to prevent crawling.  If you need 
code to make your server request to look like it is a browser, just let 
me know.

Happy Coding,
Rob

On 03/16/2016 09:58 AM, Nathan Andelin wrote:
> Mike,
>
> Last I checked, "frame-busting hacks" like x-frames were not part of PCI.
> You probably have good grounds for ignoring your latest "PCI scan", in that
> regard.
>
> iframes provide useful functionality. clickJacking is a problem with
> malicious sites. Does anyone have cause to view your web applications as
> being malicious?
>
> However, if you really do want to provide content from multiple sites
> without using iframes, the idea of using GETURI (or HTTPAPI) to retrieve
> "content" from "foreign" sites and passing it through to your users seems
> like the best alternative. It will require some redesign and rework of any
> applications that currently use iframes.