Skip to main content

Embedded Forms Now Require HTTPS

  • Jul 23, 2021 3:16 PM UTC
  • Nov 22, 2021 11:33 AM UTC
  • 34 replies
  • 2671 views
Embedded Forms Now Require HTTPS
Show first post

34 replies

mathio-tf
Typeform
Forum|alt.badge.img+5
  • Typeform
  • Nov 22, 2021 11:08 AM UTC

Unfortunately when sandbox mode is enabled there are no responses created. Your onSubmit callback is invoked with responseId value of undefined.


  • Navigating the Land
  • Dec 6, 2021 9:52 AM UTC

@megmc88 above mentioned that some forms were working and others were not - we are experiencing this too and have tracked it down to a difference in CSP headers for forms within the same account.

  • One sends content-security-policy: with frame-ancestors http://localhost: https:;* - doesn't work on iOS (Ionic) - likely because Ionic sends ionic://
  • The other sends content-security-policy-report-only: with frame-ancestors https: - works on iOS (Ionic) - because it’s report only

Also see Recently stopped working inside Capacitor and Cordova Applications · Issue #311 · Typeform/embed (github.com)


Liz
Ex–Typefomer
Forum|alt.badge.img+5
  • Author
  • Tech Community Advocate
  • Dec 6, 2021 7:15 PM UTC

Thanks for sharing this, @bigjump !!


mathio-tf
Typeform
Forum|alt.badge.img+5
  • Typeform
  • Dec 9, 2021 9:30 AM UTC

Hello @bigjump 

you can contact our customer success team and they will be able to switch CSP headers for your typeforms to “report only”.

There will be a better solution in future, but for now feel free to use the form below:

https://www.typeform.com/help/contact/


  • Navigating the Land
  • Dec 9, 2021 10:32 AM UTC

Hello @bigjump 

you can contact our customer success team and they will be able to switch CSP headers for your typeforms to “report only”.

There will be a better solution in future, but for now feel free to use the form below:

https://www.typeform.com/help/contact/

Will do -thanks.


mathio-tf
Typeform
Forum|alt.badge.img+5
  • Typeform
  • Dec 10, 2021 10:52 AM UTC

 

We updated the CSP headers for all typeforms:

content-security-policy: ... frame-ancestors http://localhost:* capacitor: ionic: https:;


There is no need to contact support anymore to make your typeforms available in your PWAs built with frameworks such as Capacitor or Ionic.

I built this sample PWA in Capacitor (it is served on capacitor://localhost/) and embedded typeforms work without any issues now. 

Note: I had to reinstall the app to clear the cached version of embed.js. If this is not an option for you, you could append a query parameter to the lib to force loading new version, eg embed.js?v=1.

 


  • Navigating the Land
  • Dec 10, 2021 11:00 AM UTC

Awesome - confirmed as working for us too.

Many thanks for turning this around so quickly. :)


  • Navigating the Land
  • Nov 17, 2022 1:47 PM UTC

I want to embedd the forms on my websites homepage but https protocols on my website not giving the access to typeform.

Kindly help and fix the issue, thanks,


mathio-tf
Typeform
Forum|alt.badge.img+5
  • Typeform
  • Nov 17, 2022 1:54 PM UTC

Hello @joshmartin 

please share the code you use on your website and also where in the website do you expect it to be displayed.

How did you conclude the issue was with HTTPS protocol?