eSign Online – Option to use iframes will be discontinued
Overview
esign-001-2024
Product: Scrive eSign Online
Change: Option to use iframes is obsolete
Environment: All
Type: Mandatory, action necessary
Enforced as of: 2024-04-09
Description
The possibility to use iframes will become obsolete due to it being vulnerable to Cross-site scripting (XSS), clickjacking as well as due to privacy concerns.
Impact
If you are using iframes when using eSign Online within your own integration, you cannot do so after 9 April 2024.
You must adapt your integration.
Recommendation
Instead of using iframes, you can either
- refer to the respective URL, i.e. https://scrive.com/[...] directly, or
- set up your integration in a way so that the URL is opened in a new window.
Contact
If you have any further questions, feel free to reach out to Scrive Tech Support by writing an email to support@scrive.com referring to esign-001-2024.