丢失会话状态在iframe中，而不是在弹出窗口 [英] Loses session state in iframe, but not in pop-up window

问题描述

我们正在开发一个网上商店，以及处理付款与第三方UI。

We're developing a web shop, and process payments with a third party UI.

我们已选择显示的iframe内而外退房页面内支付UI，尽管（我们现在认识），支付解决方案供应商使用的是顶层窗口推荐。

We have chosen to show the payment UI inside an iframe inside out check-out page, even though (we now realize), the payment solution provider recommend using a top-level window.

现在发生的事情是，在IE7 / IE8，支付UI失去会话状态的第一个回发（在iframe内），而在Firefox，它工作得很好。我们注意到，支付UI使用ASP.NET开发的。

Now what happens is that in IE7/IE8, the payment UI loses session state on the first postback (inside the iframe), while in Firefox, it works just fine. We observe that the payment UI is developed using ASP.NET.

我是IM pression认为，就服务器而言，有一个从一个iframe被引用与从顶层窗口没有什么区别下，但显然没有。

I was under the impression that as far as the server is concerned, there is no difference between being referenced from an iframe versus from a top-level window, but clearly there is.

有没有人有线索？什么是一个iframe做到这一点可能作出的支付服务器的差异，导致它失去会话状态？

Does anyone have a clue? What does an iframe do that could possibly make a difference to the payment server, causing it to lose session state?

莫非（它突然照在我）在cookie处理的差异？严格的安全吧？

Could it (it suddenly dawns on me) be differences in cookie handling? Stricter security perhaps?

推荐答案

或许这个原因造成的：

Internet Explorer 6的推出为平台隐私preferences（P3P）项目的支持。 P3P标准指出，如果一个FRAMESET或父窗口引用一个框架或一个子窗口中另一个站点，子站点被视为第三方内容。 IE浏览器，它使用中的默认隐私设置，默默地拒绝来自第三方网站发送的cookie。

Internet Explorer 6 introduced support for the Platform for Privacy Preferences (P3P) Project. The P3P standard notes that if a FRAMESET or a parent window references another site inside a FRAME or inside a child window, the child site is considered third party content. Internet Explorer, which uses the default privacy setting of Medium, silently rejects cookies sent from third party sites.

<一个href=\"http://support.microsoft.com/kb/323752/en-us\">http://support.microsoft.com/kb/323752/en-us

我曾经听到有人说，一个IFrame实际上是IE浏览器的一个新实例，但显然它更复杂一些。

I once heard someone say that an IFrame is actually a new instance of IE, but apparently it's a bit more complicated.

这篇关于丢失会话状态在iframe中，而不是在弹出窗口的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！