When I embed a website into WQ-BS1 or WQ-BM1, it cannot be displayed.
WQ-BS1 and WQ-BM1 use iframe to display the website.
This is because we need to control which contents should be displayed on BRAVIA by our own HTML5 app function. If we display the website just like on a browser, we cannot control the contents because they are controlled by the website itself. To control displayed contents, we currently need to use iframe.
On the other hand, some websites prohibit being displayed in iframe for security reasons (to prevent Clickjacking attacks, etc.).
If the Response Header from the website includes either of the following options, then the browser cannot display the website in iframe.
- X-Frame-Options: deny / sameorigin / allow-from uri
- Content-Security-Policy: frame-ancestors ‘self’
Therefore, if the website prohibits being displayed in iframe, then it cannot be displayed on WQ-BS1 or WQ-BM1, and a blank screen appears. To avoid this, you need to change the server side and allow the website to be displayed in iframe.