I had a perfectly working PHP page with an iframe inside. Suddenly it stoped working in Chrome with this error:
Chrome detected unusual code on this page and blocked it to protect your personal information...
Any idea how to solve it?
"Chrome detected unusual code" error in previously working iframe
Viewed 3724
3 Answers
Chrome changed its default implementation of X-XSS-Protection to 'X-XSS-Protection: 1; mode=block' and mainly this issue found in Chrome Version 60 and window 10 PC see the below reference link related t this issue
https://bugs.chromium.org/p/chromium/issues/detail?id=702542
https://bugs.chromium.org/p/chromium/issues/detail?id=706038
https://productforums.google.com/forum/#!topic/chrome/4MUJd75N4Jw
The other posts here offer an answer. But none of them offer any code-sample-based explanation, so, I will try :
This is caused by a webpage displaying HTML that was POST'd to it, when that HTML contains JS event triggers, for example :
<p class="someParagraph" onClick="doTheMagicThing();">
If you have an iframe, that receives text like this in a POST or a forum, and you display that text, as well, then Chrome will issue the error (and effectively block the page), unless you have the X-XSS-Protection header disabled.
Naturally, passing huge swathes of html like this between independent components is not considered good design.
Related