Topic-icon ERR_TOO_MANY_REDIRECTS

Support Specialist
10 years 8 months ago #54834 by alzander
Replied by alzander on topic ERR_TOO_MANY_REDIRECTS
I found the problem. In the Javascript console is the following message:

Refused to display 'jugsaopaulo.com.br/' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.

That's something being set on your server to all responses. It's a security feature that prevents your site from being loaded within a frame, which is what Facebook is doing.

I'm not sure if you used the Admin Tools .htaccess creator. If so, there's an option in there for "Forbid displaying in FRAME (for HTTPS-only sites)" which needs to be disabled. If you didn't use that, you'll need to check your .htaccess file to see if the X-Frame-Options header is being sent or contact HostGator to help narrow down where that value is getting set.

I hope that helps,
Alex
The topic has been locked.
Active Subscriptions:

None
10 years 8 months ago #54835 by totallnet
Replied by totallnet on topic ERR_TOO_MANY_REDIRECTS
Hi... i think that we fix it..

I check admintools htaccess...

Forbid displaying in FRAME (for HTTPS-only sites) is set NO and cant access my site inside FB.
So i check the .htaccess and found this lines.. and commented it
<IfModule mod_headers.c>

	Header always append X-Frame-Options SAMEORIGIN

	# The `X-Frame-Options` response header should be send only for
	# HTML documents and not for the other resources.

	<FilesMatch "\.(appcache|atom|bbaw|bmp|crx|css|cur|eot|f4[abpv]|flv|geojson|gif|htc|ico|jpe?g|js|json(ld)?|m4[av]|manifest|map|mp4|oex|og[agv]|opus|otf|pdf|png|rdf|rss|safariextz|svgz?|swf|topojson|tt[cf]|txt|vcard|vcf|vtt|webapp|web[mp]|woff2?|xloc|xml|xpi)$">
		Header unset X-Frame-Options
	</FilesMatch>

</IfModule>

Voila.. fixed...

Can you try to understand whats this lines means??
Thanks for your big support...

Kazuo
The topic has been locked.
Support Specialist
10 years 8 months ago #54853 by alzander
Replied by alzander on topic ERR_TOO_MANY_REDIRECTS
Yes, those lines are telling browsers not to show your site within an iFrame. That prevents your site from showing in the Facebook Canvas.

I'm glad to hear we could help get you going. If you need anything else, please let us know.

Thanks,
Alex
The topic has been locked.