5

I have an aspx page with a listbox control. The listbox is populated from a collection that is retrieved from a service when the page loads. When the user selects an item from the listbox the page posts back, adding the retrieved objects to the session before reloading. On the reload I use the session objects instead of having to call the service again.

This all works fine until I access the page from within an iFrame. The Session objects are not retrieved when the page is in an iFrame (Session["blah"] is null). This code works perfectly when the page is not in an iFrame.

I am using IIS7 and windows server 2008. Is there anything I need to do in ISS to allow Session variables to be used in an iFrame? Does anyone know of anything else that may cause this to happen?

Thanks, Neil

Improve this question
6
  • DO you have this problem in all browser or only IE? Commented Jun 16, 2011 at 7:58
  • Are you posting back inside the frame. Or are you posting back the container page? If it is the latter it won't have knowledge of the changes the user made to the page in the frame. Commented Jun 16, 2011 at 7:59
  • No the iFrame doesn't have any knowledge of the parent page, nor does it need it. The parent page is just for navigation. I am only using IE as it is a page in Dynamics CRM 2011 which only works with IE, so I can't really test it with other browsers. I will attempt to create a basic html page with an iFrame and see if the same issue happens in IE and other browsers Commented Jun 16, 2011 at 8:06
  • 1
    Actually never mind, I just cleared out the files in `C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files` and restarted IIS and it was all working. Commented Jun 16, 2011 at 8:15
  • 1
    @neil: consider to create an answer with these informations, so that this question could be accepted and closed and others might benefit from your solution. Commented Jun 16, 2011 at 9:05

5 Answers 5

Reset to default
10

IE gives lower level of trust to 3rd party content loaded in an iframe. This blocks session cookies.

You can solve this by setting a P3P header in IIS:

Name = p3p
Value = CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"

IIS settings P3P response headers

See Also

Improve this answer
Sign up to request clarification or add additional context in comments.

Comments

6

In my case, the project was .net framework 4.6.1. I've upgraded to 4.7.2 version and added the key below to the web.config 

<system.web>
    <sessionState cookieSameSite="None"/>

This way third party Iframe sessions starts working.

Before you do this change, it's better to read this https://learn.microsoft.com/en-us/aspnet/samesite/system-web-samesite

Improve this answer

3 Comments

Thank you so much for this answer. This answer solved my problem.
Thank you ! It worked for me when I deployed website on Azure using Target .NET version 4.8. Did not work on my QA server which used old Windows 2009 R2.
It may be required to make the cookie Secured : <httpCookies httpOnlyCookies="true" requireSSL="true" sameSite="None" />
4

Actually never mind, I just cleared out the files in C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files and restarted IIS and it was all working

Improve this answer

1 Comment

Exactly what I just did.. .amazingly bad caching control in ASP.net, WHY does this thing not expire code itself I just wonder... WHY Microsoft.
1

As of 2021, Chrome (and maybe others) requires that the cookie is secured.

This can be achieved this way :

<system.web>
  <httpCookies httpOnlyCookies="true" requireSSL="true" sameSite="None" />
</system.web>
Improve this answer

Comments

-4

To enable sessions in iFrames: InterNet Options -> Privacy -> Advanced -> Check "Always Allows Session Cookies"

Improve this answer

1 Comment

You cannot reasonably expect each visitor to your site to do this

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.