We have a project where we are trying to use IFrames within a UiPath app interface to show different systems that the user needs to engage with as part of their work. Some of the systems don’t use HTTPS and are instead HTTP. When we try to add these as sources for the IFrame we are told that HTTP sources are not supported.
I want to confirm that this is the case and find out:
a: Why aren’t they supported
b: Will support be added for them? If so when?
You are correct that UiPath App Integration currently does not support HTTP sources for IFrames. This is because HTTP is considered a less secure protocol than HTTPS and could potentially expose sensitive data to security threats. So it only allow HTTPS sources as a security best practice.
Not sure if UiPath plans to add support for HTTP sources in the future. In the meantime, you can consider alternative solutions such as using a proxy server to convert HTTP traffic to HTTPS.
“wont be supported. since people can create an app with a full screen iframe and render any site, users of the app might look at the url and trust the content seeing the UiPath domain. So have taken few security measures to make sure don’t render fake sites. https restriction is part of that ideology”.