Iframe Not Loading After Upgrading NetScaler

Cross-Origin Headers

Starting with NetScaler Build 14.1-29.63, NetScaler returns HTTP headers to prevent cross-origin resources from being loaded. This prevents the LoginTC iframe from loading.

Remove the headers by running the following commands:

Then apply the policies globally as response rewrite policies (or at the virtual server level):

[Optional] Then run the following commands if using NetScaler Gateway VPN Virtual Servers (replace <vpn-gateway-vs-name> with your VPN Gateway Virtual Server name):

[Optional] Then run the following commands if using NetScaler Authentication Virtual Servers (replace <authentication-vs-name> with your Authentication Virtual Server name):

Clear the cache:

Content-Security-Policy Headers

Starting with NetScaler Build 13.1-59.19 NetScaler returns HTTP Content-Security-Policy headers that prevent the LoginTC iframe from being inserted into the login page.

NOTE: In the following instructions, replace "/logon/LogonPoint/tmindex.html" with the URL to your NetScaler login page (for example,  "/logon/LogonPoint/index.html")

Create the following rewrite actions and policies

NOTE: If you already have a custom Content-Security-Policy header defined, add the following directives to your policy (or update the existing directives):

Then apply the policies globally as response rewrite policies (or at the virtual server level):

Clear the cache: