# Please upgrade your browser This Kibana installation has strict security requirements enabled that your current browser does not meet

**URL:** https://discuss.elastic.co/t/please-upgrade-your-browser-this-kibana-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/313989
**Category:** Kibana
**Created:** [September 8, 2022, 12:04pm UTC](https://discuss.elastic.co/t/please-upgrade-your-browser-this-kibana-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/313989 "2022-09-08T12:04:06Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![bandodkarD](https://avatars.discourse-cdn.com/v4/letter/b/9d8465/32.png) [@bandodkarD](https://discuss.elastic.co/u/bandodkarD)
#### Post date: [September 8, 2022, 12:04pm UTC](https://discuss.elastic.co/t/please-upgrade-your-browser-this-kibana-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/313989/1 "2022-09-08T12:04:06Z")

</div>

We are building a POC to deploy Kibana iframe using a react app.  
We have an existing react app and have embedded the iframe into it. Elastic cloud version 8.3.3 is used.  
The iframe successfully loads but we do not want the ES login page to appear. Therefore we are passing a API Token using these headers for automatic login.

```auto
import React, { useEffect, useState } from 'react';
export const ElasticDashboard = () => {
  const [urlObject, setURLObject] = useState(null);
  const url =
    'https://<SERVER_URL>:9243/app/dashboards#/view/<dashboard-id>?embed=true&_g=(filters%3A!()%2CrefreshInterval%3A(pause%3A!t%2Cvalue%3A0)%2Ctime%3A(from%3Anow-15y%2Cto%3Anow))&show-top-menu=true&show-query-input=true&show-time-filter=true';
  const apiKey = 'apiKey==';
  useEffect(() => {
    const fetchIframeXHR = async () => {
      let xhr = new XMLHttpRequest();
      xhr.open('GET', url);
      xhr.onreadystatechange = handler;
      xhr.responseType = 'blob';
      xhr.setRequestHeader('Authorization', `apikey ${apiKey}`);
      xhr.send();
      function handler() {
        if (this.readyState === this.DONE) {
          if (this.status === 200) {
            // this.response is a Blob, because we set responseType above
            let urlObject = URL.createObjectURL(this.response);
            setURLObject(urlObject);
          } else {
            console.error('Page not found');
          }
        }
      }
    };
    fetchIframeXHR();
  }, []);
  return (
    <div>
      <iframe title='elastic_charts' src={urlObject} height='700'></iframe>
    </div>
  );
};

```

Currently POC is running in the localhost with http protocol.

We currently have these configurations on Kibana.yml  
**server.cors.enabled: true**  
**server.cors.allowOrigin: ['\*']**  
**xpack.security.sameSiteCookies: None**  
**xpack.reporting.roles.enabled: false**  
**csp.strict: false**  
**#csp.script\_src: [https://kibana\_url:9243 'self' 'unsafe-inline' 'unsafe-eval' https://\*]**  
_csp.script\_src: [http:// 'self' 'unsafe-eval']_\*

All these configurations led us to this error on the browser and no errors on console.  
Can anyone please provide any help?

---

<div class="post-metadata">

### Author: ![bandodkarD](https://avatars.discourse-cdn.com/v4/letter/b/9d8465/32.png) [@bandodkarD](https://discuss.elastic.co/u/bandodkarD)
#### Post date: [September 8, 2022, 12:36pm UTC](https://discuss.elastic.co/t/please-upgrade-your-browser-this-kibana-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/313989/2 "2022-09-08T12:36:36Z")

</div>

![MicrosoftTeams-image](https://us1.discourse-cdn.com/elastic/original/3X/3/f/3f2e2b19c3ed3dd9fe3c3f9bdce9b42dbbc3dbdc.png)  
Google Chrome version

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 6, 2022, 12:37pm UTC](https://discuss.elastic.co/t/please-upgrade-your-browser-this-kibana-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/313989/3 "2022-10-06T12:37:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.