Skip to main content
Question

Do we need to specify frameAncestors for displayFormat: "default"?

  • March 24, 2025
  • 1 reply
  • 19 views

Forum|alt.badge.img

Hi,

 

We have not specified any FrameAncestors or messageOrigins for displayFormat: “default”

I can see a loading icon on the screen

 

Are those required even for Default view??

Thank you

1 reply

Forum|alt.badge.img+4

Hi Sandeep,

Yes, if you are going to use the Docusign JS implementation.

Documentation available here: https://developers.docusign.com/docs/esign-rest-api/esign101/concepts/embedding/docusign-js-embedded-reference/

If you are not going to use the Docusign JS implementation and implement the iframe yourself, then there is other options you can specify which are documented here: https://developers.docusign.com/docs/esign-rest-api/reference/envelopes/envelopeviews/createrecipient/

 

xFrameOptions

Specifies whether a browser should be allowed to render a page in a frame or IFrame. Setting this property ensures that your content is not embedded into unauthorized pages or frames.

Valid values are:

  • deny: The page cannot be displayed in a frame.
  • same_origin: The page can only be displayed in a frame on the same origin as the page itself.
  • allow_from: The page can only be displayed in a frame on the origin specified by the xFrameOptionsAllowFromUrl property.

xFrameOptionsAllowFromUrl

When the value of xFrameOptions is allow_from, this property specifies the origin on which the page is allowed to display in a frame. If the value of xFrameOptions is allow_from, you must include a value for this property.