# Kibana iFrame Cross-Origin

**URL:** <https://discuss.elastic.co/t/kibana-iframe-cross-origin/93631>\
**Category:** Kibana\
**Created:** [July 18, 2017, 5:14pm UTC](https://discuss.elastic.co/t/kibana-iframe-cross-origin/93631 "2017-07-18T17:14:16Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![tjroyy](https://avatars.discourse-cdn.com/v4/letter/t/ac8455/32.png) [@tjroyy](https://discuss.elastic.co/u/tjroyy)\
**Post date:** [July 18, 2017, 5:14pm UTC](https://discuss.elastic.co/t/kibana-iframe-cross-origin/93631/1 "2017-07-18T17:14:17Z")

</div>

I am trying to embed a Kibana saved visual iframe into my website, but I am getting the following

Uncaught SecurityError: Blocked a frame with origin "[http://XXXXXXXXX:5601](http://XXXXXXXXX:5601)" from accessing a cross-origin frame. ([http://XXXXXX:5601/bundles/kibana.bundle.js?v=10229:133109](http://XXXXXX:5601/bundles/kibana.bundle.js?v=10229:133109))

I have tried putting it into a plain html file and it is the same error.

Is there anything specific that needs to happen to enable this?

---

<div class="post-metadata">

**Author:** ![BigFunger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bigfunger/32/7323_2.png) [@BigFunger](https://discuss.elastic.co/u/BigFunger)\
**Post date:** [July 18, 2017, 5:17pm UTC](https://discuss.elastic.co/t/kibana-iframe-cross-origin/93631/2 "2017-07-18T17:17:56Z")

</div>

Excuse the silly question, but is the error originating from within Kibana, or is the error being thrown by your website?

---

<div class="post-metadata">

**Author:** ![tjroyy](https://avatars.discourse-cdn.com/v4/letter/t/ac8455/32.png) [@tjroyy](https://discuss.elastic.co/u/tjroyy)\
**Post date:** [July 18, 2017, 5:26pm UTC](https://discuss.elastic.co/t/kibana-iframe-cross-origin/93631/3 "2017-07-18T17:26:26Z")

</div>

This is being thrown when my website tries to load the iframe

---

<div class="post-metadata">

**Author:** ![BigFunger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bigfunger/32/7323_2.png) [@BigFunger](https://discuss.elastic.co/u/BigFunger)\
**Post date:** [July 18, 2017, 6:25pm UTC](https://discuss.elastic.co/t/kibana-iframe-cross-origin/93631/4 "2017-07-18T18:25:09Z")

</div>

Are you using x-pack? Are you trying to [access elements in the iframe via javascript?](https://stackoverflow.com/questions/25098021/securityerror-blocked-a-frame-with-origin-from-accessing-a-cross-origin-frame)

---

<div class="post-metadata">

**Author:** ![tjroyy](https://avatars.discourse-cdn.com/v4/letter/t/ac8455/32.png) [@tjroyy](https://discuss.elastic.co/u/tjroyy)\
**Post date:** [July 18, 2017, 6:35pm UTC](https://discuss.elastic.co/t/kibana-iframe-cross-origin/93631/5 "2017-07-18T18:35:56Z")

</div>

I am not using x-pack and yes that is what I am trying to do when I receive the error

---

<div class="post-metadata">

**Author:** ![BigFunger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bigfunger/32/7323_2.png) [@BigFunger](https://discuss.elastic.co/u/BigFunger)\
**Post date:** [July 18, 2017, 6:38pm UTC](https://discuss.elastic.co/t/kibana-iframe-cross-origin/93631/6 "2017-07-18T18:38:18Z")

</div>

The Stack Overflow post that I linked to above provides more information than I could provide here.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 15, 2017, 6:38pm UTC](https://discuss.elastic.co/t/kibana-iframe-cross-origin/93631/7 "2017-08-15T18:38:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.