[CB-12464] InAppBrowser for browser does not work with X-Frame-Options: DENY

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Cannot Reproduce
• Component/s: cordova-browser, cordova-plugin-inappbrowser
• Assignee: Unassigned
• Reporter: Joel Richard
• Created: 16/Feb/17 15:22
• Updated: 23/Aug/18 06:46
• Resolved: 19/Jul/17 16:54

Description

I am using cordova-plugin-inappbrowser 1.6.1 for an OAuth login page. Unfortunately, the login does not work with "phonegap serve" since it uses X-Frame-Options: DENY.

I see two possible solutions:
1) window.open instead of iframe
2) Load everything in the InAppBrowser through a proxy and remove such headers (similar to the proxy which is used for CORS problems).