Rails: Enabled cookies inside IFrames for IE via P3P headers.

use something like this instead:

class AllowCookiesInIframesMiddleware
  def initialize(app)
    @app = app
  end

  def call(env)
    response, headers, body = @app.call(env)
    headers['P3P'] = %{CP="NOI DSP COR NID ADMa OPTa OUR NOR"}
    [response, headers, body]
  end
end

IFrames in IE only get the same cookies as normal pages when P3P headers are added
=> 'iframe-using' IE users get P3P headers on every request
304 Not modified pages do not get P3P headers (via ETag)
=> 'iframe-using' IE users do not get 304

gem install ie_iframe_cookies

To cookie-tag users as 'iframe-using', add this to all actions rendered inside IFrames.
(only IE users are tagged)

before_action :normal_cookies_for_ie_in_iframes! # only: [:foo, :bar]

• Problems with Safari? try this or that

• Eric Harrison

Sascha Depold

Michael Grosser
michael@grosser.it
License: MIT