Hi guys,
I'm a noob and can't for the life of me figure out where to place this code.
I'm just trying to get the Yandex Webvisor player to work.
Loading pages in the player
When playing back a user's actions, either a saved copy or the current version of the page is loaded. The page representations have the following priority (from highest to lowest): a copy of the page saved from the browser, a copy recorded by the robot, the current page on the website.
The current page on the website is loaded to the player using an iframe. If your site is protected from being shown in an iframe (the X-Frame-Options header is used in the server settings), the collected data won't be available for viewing. To view the site's session data, you must change the server settings and add an exception for the webvisor.com domain and subdomains, as well as for your site's domain. Use the regular expression
^https?:\/\/([^\/]+\.)?(yourdomain\.com|webvisor\.com)\/
If you use nginx, add the following exceptions to your configuration:
location / {
set $frame_options '';
if ($http_referer !~ '^https?:\/\/([^\/]+\.)?(yourdomain\.com|webvisor\.com)\/'){
set $frame_options 'SAMEORIGIN';
}
add_header X-Frame-Options $frame_options;
...
}
where yourdomain\.com is the site's domain name. Use your site's domain zone (it may differ from .com).
I'm a noob and can't for the life of me figure out where to place this code.
I'm just trying to get the Yandex Webvisor player to work.
Loading pages in the player
When playing back a user's actions, either a saved copy or the current version of the page is loaded. The page representations have the following priority (from highest to lowest): a copy of the page saved from the browser, a copy recorded by the robot, the current page on the website.
The current page on the website is loaded to the player using an iframe. If your site is protected from being shown in an iframe (the X-Frame-Options header is used in the server settings), the collected data won't be available for viewing. To view the site's session data, you must change the server settings and add an exception for the webvisor.com domain and subdomains, as well as for your site's domain. Use the regular expression
^https?:\/\/([^\/]+\.)?(yourdomain\.com|webvisor\.com)\/
If you use nginx, add the following exceptions to your configuration:
location / {
set $frame_options '';
if ($http_referer !~ '^https?:\/\/([^\/]+\.)?(yourdomain\.com|webvisor\.com)\/'){
set $frame_options 'SAMEORIGIN';
}
add_header X-Frame-Options $frame_options;
...
}
where yourdomain\.com is the site's domain name. Use your site's domain zone (it may differ from .com).