Same-origin policy on file scheme

[chellio]

I set browser settings as below:

Code: Select all

    CefBrowserSettings sett;
    sett.universal_access_from_file_urls = STATE_ENABLED;
    sett.file_access_from_file_urls = STATE_ENABLED;

However, X-Frame-Options header is still enforced.
Trying to display such page on iframe, that is in local file, give me following error:

Code: Select all

"Refused to display 'https://www.google.pl/?' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.", source: about:blank (0)

.

I think with universal_access_from_file_urls option, X-Frame-Options header should not be enforced.

[fddima]

Does it works in chrome with same command line flags?

[chellio]

I tested it in cefclient and also failed.

[fddima]

I tested it in cefclient and also failed.

What about standard chrome?

[chellio]

There is no allow-universal-access-from-files option according to http://peter.sh/experiments/chromium-co ... -switches/, but also failed.(in chrome browser)
But for example --disable-image-loading is enforced in cefclient, but in chrome brorwser no.