Can't log in to app via iFrame on Chrome, but can when viewed directly

Question

I am building an auction app for a music festival and the app is being embedded into the festival's site via an iFrame.

The problem I'm having is with Chrome. When viewed directly (on the source site) I can log in to the app fine, but when viewing the app through the iFrame on the festival's website I can't seem to log in. However, I can still register users. I should also note that this system was built on CodeIgnitor.

I have absolutely no clue why this is happening? Does it have to do with cross-domain policies? Any help on this is much appreciated.

Answer 1

The site you are interacting with probably has implemented a protection against Clickjacking. The protection usually includes either breaking out of iFrames or completely blocking all requests coming out of iFrames.

I would contact the site developer and inquire regarding any implemented clickjacking protections they have in place - they may be able to whitelist your domain name, but this depends on their technology etc.