Allow IFrame bursting in/from OBIEE 11G

27 Aug

If you want to display OBIEE 11G content in any other portals using IFrames, You will end up with a message “OBIEE content cannot be displayed in an IFrame”. Because In OBIEE 11G, Oracle added framebusting check, to avoid the clickhacking security atatck.

To control the IFrame rendering we need to add the following tags in instanceconfig.xml within security key and restart the OBI Presentation Service.




OBIEE 11G support 3 modes of IFrame bursting checks

1. prohibit: Never allow OBIEE 11G content to be rendered in IFrame.

2. sameDomainOnly: Allow rendering in IFrame if enclosing page was generated by the server in same domain.

3. allow: Always allows in-IFrame rendering.

So based on your requirement you need to change/add the IFrame bursting configurations to your OBI Presentation Server.

After this, Navigate to <Middleware_Home>\oracleBI1\bifoundation\web\app\WEB-INF\ and open the ‘web.xml‘ file.

Add the following highlighted entry to the file.





Restart all OBIEE 11G services to reflect these changes in application.




Posted by on August 27, 2011 in BI Publisher, OBI EE, OBIEE 11g, Weblogic


Tags: , , , ,

11 responses to “Allow IFrame bursting in/from OBIEE 11G

  1. preethi

    August 30, 2011 at 1:59 pm

    Hi Shiva,

    I am trying to embed obiee within an iframe on my tutorial version. Would appreciate if you assist me on this please. After building a report, i copy paste the url within the iframesrc and when i open the htmliframe, it does say “obiee contents cannot be displayed within the iframe” and opens the analytics page where i saved the report. But is there a way i can display the contents only within the iframe?

  2. preethi

    August 30, 2011 at 2:00 pm

    Btw, im using obiee 11.5 version on my system.

  3. preethi

    August 30, 2011 at 4:07 pm

    I have restarted the presentation services after adding the tag within the security. The analytis page is not opening and gives the following error
    “Error 404–Not Found
    From RFC 2068 Hypertext Transfer Protocol — HTTP/1.1:
    10.4.5 404 Not Found
    The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.

    If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address.”

  4. Sudheer

    October 24, 2011 at 7:19 am

    Hi Shiva,

    I have gone through your blog, Its really very good and use full..


  5. krishna

    June 3, 2012 at 6:20 am

    after done the changes it working in my browsers and remote desktop areas..For example if any user login out side remote desktop we are getting below error.

    Getting error message :OBIEE content cannot be displayed in the IFrame – if you logging in for 1st time and there is no open BI session we are getting the error.

    Anyhelp on this

  6. krishna

    June 4, 2012 at 6:16 am

    I have made all necessary changes in web and instance files.I am able to get the IFrame functionality from my remote desktop area(Where OBIEE 11G installed).

    Any user try to access the URL (Out of RDC) its showing below error.
    Getting error message :OBIEE content cannot be displayed in the IFrame –

    if you logging in for 1st time and there is no open BI session we are getting the error.

    Please help me anyone

  7. Shiva Molabanti

    October 15, 2012 at 10:00 am

    I have updated some extra hidden steps to make it work. Please check now.


  8. Patrick

    April 24, 2013 at 2:01 pm

    Hi Shiva,

    I don’t see the changes on the page, can you please provide us the other steps? We are still seing the message – OBIEE content cannot be displayed in the IFrame – after changing the web.xml file. I’m on v.

  9. Patrick

    April 29, 2013 at 5:57 pm

    Please ignore my previous comment, misstypo from DEV team

  10. Ritesh

    November 12, 2013 at 5:01 am

    Hi Shiva,
    Although i am able to display the OBIEE content i am not able to display OBIEE mobile apps content in an iframe.I have created OBIEE mobile app and want to display that in an iframe.Is there any more configuration that needs to be done for this?

  11. Babu

    March 8, 2017 at 3:11 pm


    Please someone share the location for web.xml file in obiee 12c.

    below is the location in obiee 11g.



Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: