SAPUI5: Display Fiori Launchpad-App in iFrame (Clickjack-Protection)

[timkudla]

Hey community,

I try to display an Fiori Launchpad-App inside of an iFrame. At the start the iFrame displayed only a Fiori-blue background

After activating the HTTP-Whitelist and insert an entry for the specific host in the table "http_whitelist" the target application is visible. The only problem is that the mouse pointer is deactivated and looks like a general prohibition sign (ISO 7010 P001).

I found the additional information that I have to adjust the script section (index.html) of the SAPUI5 application in the following way:

<script id="sap-ui-bootstrap"
	src=".../resources/sap-ui-core.js"
	data-sap-ui-libs="sap.m"
	data-sap-ui-theme="sap_belize"
	data-sap-ui-compatVersion="edge"
	data-sap-ui-resourceroots='{"Z_...": ""}'
        data-sap-ui-frameOptions='allow'>
</script>

But the Fiori standard apps like System Recommendations have no index.html or call to load the SAPUI5 libraries.

How to allow the frameOption parameter for a Fiori standard application?

Thanks in advance!

Tim

[former_member524685]

Hi Tim,

I am facing the same problem. If you have got answers. Kindly share.

Regards,

Deep

[timkudla]

Hey Deep,

unfortunately not, otherwise I would have already shared my solution...

Regards

Tim