Embedded Forms Now Require HTTPS | Community
Skip to main content

Embedded Forms Now Require HTTPS

Embedded Forms Now Require HTTPS
Show first post

34 replies

mathio-tf
Typeform
Forum|alt.badge.img+5
  • Typeform
  • 888 replies
  • November 22, 2021

Unfortunately when sandbox mode is enabled there are no responses created. Your onSubmit callback is invoked with responseId value of undefined.


  • Navigating the Land
  • 3 replies
  • December 6, 2021

@megmc88 above mentioned that some forms were working and others were not - we are experiencing this too and have tracked it down to a difference in CSP headers for forms within the same account.

  • One sends content-security-policy: with frame-ancestors http://localhost: https:;* - doesn't work on iOS (Ionic) - likely because Ionic sends ionic://
  • The other sends content-security-policy-report-only: with frame-ancestors https: - works on iOS (Ionic) - because it’s report only

Also see Recently stopped working inside Capacitor and Cordova Applications · Issue #311 · Typeform/embed (github.com)


Liz
Community Team
Forum|alt.badge.img+5
  • Author
  • Tech Community Advocate
  • 15018 replies
  • December 6, 2021

Thanks for sharing this, @bigjump !!


mathio-tf
Typeform
Forum|alt.badge.img+5
  • Typeform
  • 888 replies
  • December 9, 2021

Hello @bigjump 

you can contact our customer success team and they will be able to switch CSP headers for your typeforms to “report only”.

There will be a better solution in future, but for now feel free to use the form below:

https://www.typeform.com/help/contact/


  • Navigating the Land
  • 3 replies
  • December 9, 2021
mathio wrote:

Hello @bigjump 

you can contact our customer success team and they will be able to switch CSP headers for your typeforms to “report only”.

There will be a better solution in future, but for now feel free to use the form below:

https://www.typeform.com/help/contact/

Will do -thanks.


mathio-tf
Typeform
Forum|alt.badge.img+5
  • Typeform
  • 888 replies
  • December 10, 2021

 

We updated the CSP headers for all typeforms:

content-security-policy: ... frame-ancestors http://localhost:* capacitor: ionic: https:;


There is no need to contact support anymore to make your typeforms available in your PWAs built with frameworks such as Capacitor or Ionic.

I built this sample PWA in Capacitor (it is served on capacitor://localhost/) and embedded typeforms work without any issues now. 

Note: I had to reinstall the app to clear the cached version of embed.js. If this is not an option for you, you could append a query parameter to the lib to force loading new version, eg embed.js?v=1.

 


  • Navigating the Land
  • 3 replies
  • December 10, 2021

Awesome - confirmed as working for us too.

Many thanks for turning this around so quickly. :)


  • Navigating the Land
  • 1 reply
  • November 17, 2022

I want to embedd the forms on my websites homepage but https protocols on my website not giving the access to typeform.

Kindly help and fix the issue, thanks,


mathio-tf
Typeform
Forum|alt.badge.img+5
  • Typeform
  • 888 replies
  • November 17, 2022

Hello @joshmartin 

please share the code you use on your website and also where in the website do you expect it to be displayed.

How did you conclude the issue was with HTTPS protocol? 


Reply