Web Viewer in WebDirect display blank with custom URL's

Issue report by Bruce Steedman

Product

FileMaker Server

Version

13.0v4

Operating system version

10.9.4

Description of the issue

I am unable to view content in a Web Viewer from many URL's and cannot work out why.

Safari and Chrome show blank Web Viewers, while IE(10) gives a clue to the problem by saying 'the publisher of this content does not allow it to be displayed in a frame' - could this then be related to FMS's Web Server Content Security Policy or X-Frame-Options? Is there a whitelist of domains you do not publish?

Tested with one specifically crafted URL containing plain text only - no Javascript - content still didn't display in a Web Viewer.

Steps to reproduce the problem

URL's which DO display correctly in all 3 browsers:-

http://www.apple.com/retail/
http://store.filemaker.com/
http://bing.com/maps(lots of JS)
http://international.nytimes.com/
http://www.metoffice.gov.uk/
http://www.keplanning.com/(my wife's business!)

URL's which DO NOT - non-exhaustive list! All show blank Web Viewer in Safari, Chrome and message/link in IE.

http://www.amazon.com/
http://stackoverflow.com/
http://www.ebay.com/
http://www.britishairways.com/travel/home/public/en_gb
http://hello--world.herokuapp.com/

This last one I designed specifically to test the issue. It's entire html is 'Hello World', no JS, no tags even! Can't see any reason why this one shouldn't work. Attached file shows the same web viewer for this URL opened in FileMaker Pro (13) and in Chrome via WebDirect (blank).

Expected result

URL's should display correctly in Web Viewer in WebDirect.

Actual result

Blank Web Viewers in Safari, Chrome

In IE, Web Viewer has Message and link to 'Open this content in a new window' - URL can then successfully be opened in a new window via the link

Exact text of any error message(s) that appear

Nothing in Web Viewer in Safari, Chrome.

In IE:

This content cannot be displayed in a frame
____________________________________________
To help protect the security of information you enter into this website, the publisher of this content does not allow it to be displayed in a frame

What you can try:

• Open this content in a new window

Configuration information

Did NOT specify secure connection requirement in FMS, but got similar results with https.

FMS is locally hosted on my Mac, but got similar results with 3rd party hosted service (https).

Given 'hello world' URL results I presume the issue cannot be related to JS or any other content and can only guess it is domain-related.

Workaround

None I can find, have had to resort to Data URI's instead - which don't of course work in IE..

Screenshot