# Dashboard iframe CORS issue

**URL:** <https://community.siren.io/t/dashboard-iframe-cors-issue/61>\
**Category:** Siren Platform/Investigate Tech Support Community\
**Created:** [June 3, 2019, 4:24am UTC](https://community.siren.io/t/dashboard-iframe-cors-issue/61 "2019-06-03T04:24:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Joshy\_Joseph](https://yyz2.discourse-cdn.com/flex032/user_avatar/community.siren.io/joshy_joseph/32/42_2.png) [@Joshy\_Joseph](https://community.siren.io/u/Joshy_Joseph)\
**Post date:** [June 3, 2019, 4:24am UTC](https://community.siren.io/t/dashboard-iframe-cors-issue/61/1 "2019-06-03T04:24:49Z")

</div>

Tried to embed iframe from SIREN dashboard into my portal (different domain)

Its says : SecurityError: Permission denied to access property “document” on cross-origin object (localhost:5606/bundles/kibana.bundle.js?v=25825:101)

Version: 10.2.1  
Build: 25825

Error: SecurityError: Permission denied to access property “document” on cross-origin object ([http://localhost:5606/bundles/kibana.bundle.js?v=25825:101](http://localhost:5606/bundles/kibana.bundle.js?v=25825:101))  
window.onerror@[http://localhost:5606/bundles/commons.bundle.js?v=25825:136:8556](http://localhost:5606/bundles/commons.bundle.js?v=25825:136:8556)

---

<div class="post-metadata">

**Author:** ![nicola.bertolin](https://avatars.discourse-cdn.com/v4/letter/n/977dab/32.png) [@nicola.bertolin](https://community.siren.io/u/nicola.bertolin)\
**Post date:** [June 4, 2019, 8:06am UTC](https://community.siren.io/t/dashboard-iframe-cors-issue/61/2 "2019-06-04T08:06:57Z")

</div>

Hi and thank you for your message.  
As reported [here](https://docs.support.siren.io/10.2.2/platform/en/siren-investigate/cross-frame-communication.html) the cross frame communication works only with the same domain.

Let us know if you have any other question.  
Best,  
Nicola

---

<div class="post-metadata">

**Author:** ![simon](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@simon](https://community.siren.io/u/simon)\
**Post date:** [June 13, 2019, 11:27am UTC](https://community.siren.io/t/dashboard-iframe-cors-issue/61/3 "2019-06-13T11:27:38Z")

</div>

Hi Joseph

From the log you posted, it looks like you are trying to embed a dashboard from investigate instance running on localhost  
In the production setup, you will probably be running Investigate behind some kind of a proxy (Apache, Nginx)  
then you can configure the proxy to serve it on the same domain OR to serve the Access-Control-Allow-Origin header to allow CORS requests

More about CORS request here [https://www.keycdn.com/support/cors](https://www.keycdn.com/support/cors)

Hope this will help you  
Simon