October: Error when saving pages if theres <iframe>

Created on 28 Nov 2016 · 7Comments · Source: octobercms/october

Steps

Hi, whenever i tried to create new or editing the partial page that already exist, if i put , i cant save the file. What i got is error that come like via ajax (see screenshot : http://imgur.com/a/WDl71 ).

But when i delete the tag, it works fine. </p> <h5>October build</h5> <p>318.</p> <h4>Themes :</h4> <p>Octaskin</p> </div> <div> <span class="badge badge-primary">Question</span> <div class="float-right"> <a class="text-muted" href="https://www.github.com/octobercms/october/issues/2514" rel="nofollow noreferrer" target="_blank" onclick="dataLayer.push({'event': 'GAEvent', 'eventCategory': 'click', 'eventAction': 'source_bottom', 'eventLabel': 'Source Bottom', 'eventValue': undefined});">Source</a> </div> </div> </div> <div class="card-footer"> <div class="row"> <div class="col"> <img src="https://avatars.githubusercontent.com/u/9864359?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt=" picture"> <strong>hackazer</strong> </div> <div class="col text-right"> </div> </div> </div> </div> </div> <div class="col-12"> <div id="ph-above-best-comment"> </div> </div> <div class="col-12"> <div class="mb-4"> <ins class="adsbygoogle" style="display:block" data-ad-client="ca-pub-3835332123789605" data-ad-slot="9295564578" data-ad-format="auto" data-full-width-responsive="true"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> </div> </div> <div class="col-12 d-flex align-items-center mb-4"> <h2>All 7 comments</h2> </div> <div class="col-12"> <div class="card card-custom mb-4"> <div class="card-body pt-3 pb-3 markdown"> <p>This might have something to do with <a rel="nofollow noopener" target="_blank" href="https://octobercms.com/support/article/ke-1">known error 1</a>. Which hosting provider are you with?</p> </div> <div class="card-footer"> <div class="row"> <div class="col"> <img src="https://avatars.githubusercontent.com/u/1392869?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="daftspunk picture"> <strong>daftspunk</strong> <span class="text-muted ml-1">on 28 Nov 2016</span> </div> <div class="col text-right"> </div> </div> </div> </div> <div class="card card-custom mb-4"> <div class="card-body pt-3 pb-3 markdown"> <p>I'm using namecheap hosting. So any chance of fixing these or bypass this error ? I really need this iframe to work .-.</p> </div> <div class="card-footer"> <div class="row"> <div class="col"> <img src="https://avatars.githubusercontent.com/u/9864359?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="hackazer picture"> <strong>hackazer</strong> <span class="text-muted ml-1">on 29 Nov 2016</span> </div> <div class="col text-right"> </div> </div> </div> </div> <div class="card card-custom mb-4"> <div class="card-body pt-3 pb-3 markdown"> <p>Also this error comes up when trying to save Layout page. Even i just opened the octaskin layout and resave without modifying anything .-.</p> </div> <div class="card-footer"> <div class="row"> <div class="col"> <img src="https://avatars.githubusercontent.com/u/9864359?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="hackazer picture"> <strong>hackazer</strong> <span class="text-muted ml-1">on 29 Nov 2016</span> </div> <div class="col text-right"> </div> </div> </div> </div> <div class="card card-custom mb-4"> <div class="card-body pt-3 pb-3 markdown"> <p>You need to contact your hosting provider and tell them to disable mod_security rules...</p> </div> <div class="card-footer"> <div class="row"> <div class="col"> <img src="https://avatars.githubusercontent.com/u/680032?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="Eoler picture"> <strong>Eoler</strong> <span class="text-muted ml-1">on 29 Nov 2016</span> </div> <div class="col text-right"> 👍<span class="ml-2 mr-3">1</span> </div> </div> </div> </div> <div class="card card-custom mb-4"> <div class="card-body pt-3 pb-3 markdown"> <p>So by disabling the mod_sec ?<br /> Okay i'll try contact them, will report back here asap :v</p> </div> <div class="card-footer"> <div class="row"> <div class="col"> <img src="https://avatars.githubusercontent.com/u/9864359?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="hackazer picture"> <strong>hackazer</strong> <span class="text-muted ml-1">on 29 Nov 2016</span> </div> <div class="col text-right"> </div> </div> </div> </div> <div class="card card-custom mb-4"> <div class="card-body pt-3 pb-3 markdown"> <p>Already contacted namecheap and got ModSec disabled. the <form> syntax is working now, but <iframe> still wont. Also when opening layout, demo layout, still cant saved, same error .-.</p> </div> <div class="card-footer"> <div class="row"> <div class="col"> <img src="https://avatars.githubusercontent.com/u/9864359?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="hackazer picture"> <strong>hackazer</strong> <span class="text-muted ml-1">on 29 Nov 2016</span> </div> <div class="col text-right"> </div> </div> </div> </div> <div class="card card-custom mb-4"> <div class="card-body pt-3 pb-3 markdown"> <p>Already FIXED the error :)<br /> Thanks for <strong>@Eoler</strong> for pointing me up. What i did is, contact the hosting provider and engage in live chat. Ask for ModSec to be disabled, then asking to whitelist rule for HTML elements that are blocked. </p> </div> <div class="card-footer"> <div class="row"> <div class="col"> <img src="https://avatars.githubusercontent.com/u/9864359?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="hackazer picture"> <strong>hackazer</strong> <span class="text-muted ml-1">on 29 Nov 2016</span> </div> <div class="col text-right"> 👍<span class="ml-2 mr-3">1</span> </div> </div> </div> </div> </div> <div class="col-12"> <div class="card card-custom mb-4"> <div class="card-body pt-3 pb-3 markdown text-center helpful"> <div class="title">Was this page helpful?</div> <div class="mt-1" onMouseLeave="rating(192067013, 0);"> <i class="fas fa-star inactive" id="star-1" onMouseOver="rating(192067013, 1);" onclick="rate(192067013, 1);"></i> <i class="fas fa-star inactive" id="star-2" onMouseOver="rating(192067013, 2);" onclick="rate(192067013, 2);"></i> <i class="fas fa-star inactive" id="star-3" onMouseOver="rating(192067013, 3);" onclick="rate(192067013, 3);"></i> <i class="fas fa-star inactive" id="star-4" onMouseOver="rating(192067013, 4);" onclick="rate(192067013, 4);"></i> <i class="fas fa-star inactive" id="star-5" onMouseOver="rating(192067013, 5);" onclick="rate(192067013, 5);"></i> </div> <div class="description text-small"><span id="rating-val">0</span> / 5 - <span id="rating-count">0</span> ratings</div> </div> </div> <div class="mb-4"> <ins class="adsbygoogle" style="display:block" data-ad-client="ca-pub-3835332123789605" data-ad-slot="3452512275" data-ad-format="auto" data-full-width-responsive="true"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> </div> </div> </div> </div> <div class="col-12 col-lg-4"> <div id="ph-above-related"></div> <div class="card card-custom issue-box"> <div class="card-body pt-3 pb-5"> <h2 class="mb-4">Related issues</h2> <div> <strong> <a href="/october/211580889/db-memorycache-doesn-t-support-query-expressions">DB MemoryCache doesn't support Query Expressions</a> </strong> </div> <div class="text-muted text-small mt-2"> <img src="https://avatars.githubusercontent.com/u/7253840?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="LukeTowers picture"> <strong class="pr-1" dir="ltr">LukeTowers</strong>  ·  <span class="px-1" dir="ltr">3</span><span>Comments</span> </div> <hr /> <div> <strong> <a href="/october/190983287/octobercms-get-theme-settings-data-in-api-web-service">OctoberCMS Get Theme Settings data in Api/Web service</a> </strong> </div> <div class="text-muted text-small mt-2"> <img src="https://avatars.githubusercontent.com/u/22929742?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="mittultechnobrave picture"> <strong class="pr-1" dir="ltr">mittultechnobrave</strong>  ·  <span class="px-1" dir="ltr">3</span><span>Comments</span> </div> <hr /> <div> <strong> <a href="/october/251900131/l5-5-auth-facades-not-working-on-routes-and-cms-pages">[L5.5] Auth facades not working on routes and CMS pages</a> </strong> </div> <div class="text-muted text-small mt-2"> <img src="https://avatars.githubusercontent.com/u/12028540?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="ChVuagniaux picture"> <strong class="pr-1" dir="ltr">ChVuagniaux</strong>  ·  <span class="px-1" dir="ltr">3</span><span>Comments</span> </div> <hr /> <div> <strong> <a href="/october/163968358/add-permission-for-dashboard-make-default">Add permission for Dashboard "make default"</a> </strong> </div> <div class="text-muted text-small mt-2"> <img src="https://avatars.githubusercontent.com/u/4172138?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="jvanremoortere picture"> <strong class="pr-1" dir="ltr">jvanremoortere</strong>  ·  <span class="px-1" dir="ltr">3</span><span>Comments</span> </div> <hr /> <div> <strong> <a href="/october/134204113/improve-visibility-of-missing-plugin-dependencies">Improve visibility of missing plugin dependencies</a> </strong> </div> <div class="text-muted text-small mt-2"> <img src="https://avatars.githubusercontent.com/u/334808?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="Flynsarmy picture"> <strong class="pr-1" dir="ltr">Flynsarmy</strong>  ·  <span class="px-1" dir="ltr">3</span><span>Comments</span> </div> </div> </div> <div class="sticky-top pt-4"> <ins class="adsbygoogle" style="display:block" data-ad-client="ca-pub-3835332123789605" data-ad-slot="3919948963" data-ad-format="auto" data-full-width-responsive="true"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> <div id="ph-below-related-2" class="mt-4"> <ins class="adsbygoogle" style="display:block" data-ad-client="ca-pub-3835332123789605" data-ad-slot="3919948963" data-ad-format="auto" data-full-width-responsive="true"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> </div> </div> </div> <div class="col-12 col-lg-4"> </div> </div> <div class="skyscraper-container"> <ins class="adsbygoogle" style="display:block" data-ad-client="ca-pub-3835332123789605" data-ad-slot="7879185320" data-ad-format="vertical" data-full-width-responsive="true"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> </div> </div> <div class="mt-5 spacer"></div> <footer class="mt-5 pb-2 py-4 text-center mt-auto"> <div class="container"> <a class="navbar-brand logo mr-5" href="/"> <img src="/assets/img/logo.svg" width="40" height="40" alt="bleepingcoder logo"> bleeping<strong>coder</strong> </a> <div class="mt-4"> bleepingcoder.com uses publicly licensed GitHub information to provide developers around the world with solutions to their problems. We are not affiliated with GitHub, Inc. or with any developers who use GitHub for their projects. We do not host any of the videos or images on our servers. All rights belong to their respective owners. </div> <div> Source for this page: <a href="https://www.github.com/octobercms/october/issues/2514" rel="nofollow noreferrer" target="_blank">Source</a> </div> </div> <hr class="mb-5 mt-5"> <div class="container"> <div class="row"> <div class="col-sm-4 col-lg mb-sm-0 mb-5"> <strong>Popular programming languages</strong> <ul class="list-unstyled mb-0 mt-2"> <li class="mb-2"> <a href="/python" dir="ltr">Python</a> </li> <li class="mb-2"> <a href="/javascript" dir="ltr">JavaScript</a> </li> <li class="mb-2"> <a href="/typescript" dir="ltr">TypeScript</a> </li> <li class="mb-2"> <a href="/cpp" dir="ltr">C++</a> </li> <li class="mb-2"> <a href="/csharp" dir="ltr">C#</a> </li> </ul> </div> <div class="col-sm-4 col-lg mb-sm-0 mb-5"> <strong>Popular GitHub projects</strong> <ul class="list-unstyled mb-0 mt-2"> <li class="mb-2"> <a href="/microsoft/vscode" dir="ltr">vscode</a> </li> <li class="mb-2"> <a href="/numpy/numpy" dir="ltr">numpy</a> </li> <li class="mb-2"> <a href="/ant-design/ant-design" dir="ltr">ant-design</a> </li> <li class="mb-2"> <a href="/mui-org/material-ui" dir="ltr">material-ui</a> </li> <li class="mb-2"> <a href="/vercel/next-js" dir="ltr">next.js</a> </li> </ul> </div> <div class="col-sm-4 col-lg mb-0"> <strong>More GitHub projects</strong> <ul class="list-unstyled mb-0 mt-2"> <li class="mb-2"> <a href="/rust-lang/rust" dir="ltr">rust</a> </li> <li class="mb-2"> <a href="/moment/moment" dir="ltr">moment</a> </li> <li class="mb-2"> <a href="/yarnpkg/yarn" dir="ltr">yarn</a> </li> <li class="mb-2"> <a href="/mozilla/pdf-js" dir="ltr">pdf.js</a> </li> <li class="mb-2"> <a href="/JuliaLang/julia" dir="ltr">julia</a> </li> </ul> </div> </div> </div> <hr class="mb-5 mt-5"> <div class="container text-muted"> © 2026 bleepingcoder.com - <a href="/bleeps" rel="nofollow">Contact</a><br /> By using our site, you acknowledge that you have read and understand our <a href="/cookies" rel="nofollow">Cookie Policy</a> and <a href="/privacy" rel="nofollow">Privacy Policy</a>. </div> </footer> <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="sha256-4+XzXVhsDmqanXGHaHvgh1gMQKX40OUvDEBTu8JcmNs=" crossorigin="anonymous"></script> <script async src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="sha384-Q6E9RHvbIyZFJoft+2mJbHaEWldlvI9IOYy5n3zV9zzTtmI3UksdQRVvoxMfooAo" crossorigin="anonymous"></script> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/js/bootstrap.min.js" integrity="sha384-wfSDF2E50Y2D1uUdj0O3uMBJnjuUD4Ih7YwaYd1iqfktj0Uod8GCExl3Og8ifwB6" crossorigin="anonymous"></script>  <script type="text/javascript" src="/assets/js/main.js"></script> <script src="https://cdn.jsdelivr.net/gh/google/code-prettify@master/loader/run_prettify.js"></script></body> </html>