Embedded Forms Now Require HTTPS

Embedded Forms Now Require HTTPS

Show first post

34 replies

Userlevel 7
Badge +5

Unfortunately when sandbox mode is enabled there are no responses created. Your onSubmit callback is invoked with responseId value of undefined.

@megmc88 above mentioned that some forms were working and others were not - we are experiencing this too and have tracked it down to a difference in CSP headers for forms within the same account.

  • One sends content-security-policy: with frame-ancestors http://localhost: https:;* - doesn't work on iOS (Ionic) - likely because Ionic sends ionic://
  • The other sends content-security-policy-report-only: with frame-ancestors https: - works on iOS (Ionic) - because it’s report only

Also see Recently stopped working inside Capacitor and Cordova Applications · Issue #311 · Typeform/embed (github.com)

Userlevel 7
Badge +5

Thanks for sharing this, @bigjump !!

Userlevel 7
Badge +5

Hello @bigjump 

you can contact our customer success team and they will be able to switch CSP headers for your typeforms to “report only”.

There will be a better solution in future, but for now feel free to use the form below:

https://www.typeform.com/help/contact/

Hello @bigjump 

you can contact our customer success team and they will be able to switch CSP headers for your typeforms to “report only”.

There will be a better solution in future, but for now feel free to use the form below:

https://www.typeform.com/help/contact/

Will do -thanks.

Userlevel 7
Badge +5

 

We updated the CSP headers for all typeforms:

content-security-policy: ... frame-ancestors http://localhost:* capacitor: ionic: https:;


There is no need to contact support anymore to make your typeforms available in your PWAs built with frameworks such as Capacitor or Ionic.

I built this sample PWA in Capacitor (it is served on capacitor://localhost/) and embedded typeforms work without any issues now. 

Note: I had to reinstall the app to clear the cached version of embed.js. If this is not an option for you, you could append a query parameter to the lib to force loading new version, eg embed.js?v=1.

 

Awesome - confirmed as working for us too.

Many thanks for turning this around so quickly. :)

I want to embedd the forms on my websites homepage but https protocols on my website not giving the access to typeform.

Kindly help and fix the issue, thanks,

Userlevel 7
Badge +5

Hello @joshmartin 

please share the code you use on your website and also where in the website do you expect it to be displayed.

How did you conclude the issue was with HTTPS protocol? 

Reply