IE7 iframe blank page

Question

I am working on a web page which has an iframe and I am loading an external site in the iframe. The page works fine in IE6, FF etc but in IE7 all I see is a blank page.

I found that this is due to the phishing filter in IE7. The phishing filter will not be able to check the web page inside the iframe so it will not be rendered properly. Have you faced this issue before? How can I resolve it?

Edit: Okay. After seeing first two answers I think I should give some more explanation to this. The page is for payment processing and I am loading a page (of a 3rd party company) which asks for credit card information. Right after entering details and pressing continue the iframe goes blank. After much investigation we found that IE7 does not accept 3rd party cookies (when page loaded in iframe). It is something to do with the security settings. Some articles in the internet say that I can bypass the phishing filter. How can I do it?

Answer 1

Have you set the IFRAME attribute WIDTH? I've read about this before and in those occasions had to do with the 'WIDTH' attribute.

So instead of using the WIDTH attribute of the IFRAME, you could use the STYLE attribute instead:

<IFRAME SRC='yourpage.html' STYLE='width:100%;'></IFRAME>

[UPDATE]
In my above example I've used a %-age to declare the width of the IFRAME. You could try to declare it in pixels instead of percentage, e.g.:

<IFRAME SRC='yourpage.html' STYLE='width:600px;'></IFRAME>

Then again, this could not be the problem in your case, but please do provide more information.

Answer 2

Perhaps you are using a title tag like <TITLE/>

Answer 3

IE7 does not accept 3rd party cookies (when page loaded in iframe).

It can do, it depends on the options that are set. Especially if the privacy level has been turned up, the third party must provide a P3P policy file to ensure IE that it's not going to be naughty. (As a privacy measure this is a bit of a dead loss IMO, but we're stuck with it.)

I am loading a page (of a 3rd party company) which asks for credit card information.

Whoah! Don't do that. The user won't be able to see from the address bar that it's the correct site URL and it's properly encrypted with SSL. You're effectively asking your customers to trust an unknown site and connection.

Lose the iframe. Most payment processors will have options to style your payment pages to match your site, and return the user to your site when they're done.

Answer 4

Finally I found the solution for this!

It can be solved by adding the p3p header to the webpage. This tells the browser that the cookie created by the pages in the iframe are OK for user's privacy. The header has to be added to all the pages loaded in the iframe.

Below are some of the links which shows how this can be achieved in different scripting languages (PHP, ASP.net , JSP etc).

http://adamyoung.net/IE-Blocking-iFrame-Cookies

http://adamyoung.net/IE-Blocking-iFrame-Cookies

http://admon.org/node/99

Note: I dint use this solution for security and compliance reasons. Thanks Bobince

Answer 5

If you are using ASP then add this code

Response.AddHeader "p3p", "CP=" & chr(34) & "CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" & chr(34)

in all the pages which are loaded in the iframe