# Iframe Embed Cross Origin Security Exception

**URL:** <https://discuss.elastic.co/t/iframe-embed-cross-origin-security-exception/101035>\
**Category:** Kibana\
**Created:** [September 19, 2017, 2:28pm UTC](https://discuss.elastic.co/t/iframe-embed-cross-origin-security-exception/101035 "2017-09-19T14:28:10Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![tsullivan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tsullivan/32/31077_2.png) [@tsullivan](https://discuss.elastic.co/u/tsullivan)\
**Post date:** [September 20, 2017, 10:22pm UTC](https://discuss.elastic.co/t/iframe-embed-cross-origin-security-exception/101035/2 "2017-09-20T22:22:10Z")

</div>

Have you tried using the suggestions in this topic? [Kibana iFrame CORS](https://discuss.elastic.co/t/kibana-iframe-cors/54291)

Basically, use `server.cors.origin: ['*']` instead of the boolean.

It's not clear what your code section in part 1 is in reference to. Are you trying to access Kibana's elements in the iframe in your own Javascript?

---

_[View the full topic](https://discuss.elastic.co/t/iframe-embed-cross-origin-security-exception/101035)._