Gitbook embed feature

[sheiquezakir]

Ask a question, start a conversation, or make an annoucement

Is it possible to embed Gitbook pages into my react application via IFrame?

[SamyPesse]

Yes, content published publicly on GitBook can be embedded into an iframe. Our Content-Security-Policy are configured to allow this in a safe way (no cookies or credentials can be accessed as none is stored in public content).

Quick example with our own docs:

[SamyPesse]

It works for me, can you make sure it's not a limitation of CSP in your own application preventing the use of iframes?

[sheiquezakir]

I'm already using iframes in my application, I think there is no problem with iframs.

[SamyPesse]

Can you share the logs you get in the browser? Chrome should give indication of why it refuses to connect

[sheiquezakir]

I'm getting this error

Refused to frame 'https://zakir-2.gitbook.io/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors https:".

[chespinoza]

I'm having the same problem. Any way to work around this? @SamyPesse?

[chespinoza]

Alright, now that I understand what's going on, this issue occurs when running from an HTTP server without TLS, as mentioned by Samy. The headers require a secure connection, so you need to have SSL. You can get this working by generating a self-signed SSL certificate and setting up your local server to use it.

I managed to get it working using this method.

Best,