Cross website security in iFrame - cannot host an app for client

[Brett Shearer]

I have developed a simple loyalty system that I would like to host for
clients, but have it appear in an IFrame on their site. The security being
used is 'out of the box' using the standard login control (customised sql
storage at back end).

This works fine in test, but when deployed the client cannot seem to login
on IE. Works fine on FireFox and Opera.

Is this an IE bug, or is it by design for some cross site scripting
protection?

 

[Eliyahu Goldin]

See if it helps:

http://aspnetresources.com/blog/frames_webforms_and_rejected_cookies.aspx

--
Eliyahu Goldin,
Software Developer
Microsoft MVP [ASP.NET]
http://msmvps.com/blogs/egoldin
http://usableasp.net