The iFrame widget dynamically displays the content of a website. The widget is the easiest way to integrate a third-party tool or any other information from the outside into your platform.
Set up the widget
The following options are available when configuring the widget:
- URL: Enter the URL and define which website should be displayed within the iFrame. Please keep in mind to insert the complete URL, including the "https://" prefix.
- Height: Select how high the iFrame section should be. The width is defined by the column layout.
- Scrolling: Select if the iFrame is fixed or if users can scroll down the linked website within the iFrame.
- Sandbox permissions and Allowed APIs: If enabled by admins, select whether certain sandbox permissions or APIs are enabled for the widget.
Haiilo uses the SSL standard to offer a safe platform. You can identify if a page uses SSL if the URL includes "https". If a URL only includes "http", the website doesn't use the SSL standard and can't be embedded as an iFrame in Haiilo.
Security settings for iFrame widgets
Security settings for iFrame widgets allow IT admins to control which permissions and browser APIs iFrame widgets can use across the platform. These settings help balance functionality and security by limiting access to specific browser capabilities. Changes to these settings apply to all iFrame widgets on the platform.
You can find these global settings under Administration > Features > Widgets, on the row for the iFrame widget.
The available settings are grouped into:
- Sandbox Permissions, which control what actions embedded content can perform.
- Allowed APIs, which control access to browser features such as camera, microphone, geolocation, clipboard access, and device sensors.
For each permission or API, choose one of the following options:
| Option | Description |
|---|---|
| Unmanaged | The permission is not controlled at the platform level. When an iFrame widget is added to the platform, the permission can be configured at the widget level. |
| Always allow | The permission is enabled for all iFrame widgets on the platform. The permission cannot be disabled at the widget level. |
| Always disallow | The permission is blocked for all iFrame widgets on the platform. The permission cannot be enabled at the widget level. |
If an embedded website is not functioning as expected within an iFrame widget, it may require sandbox permissions or API access that you're blocking. Review the requirements of the embedded content and your security settings for iFrame widgets.