{"id":14812,"date":"2023-02-07T12:26:00","date_gmt":"2023-02-07T17:26:00","guid":{"rendered":"https:\/\/manage4.performancescoring.net\/kb\/?p=14812"},"modified":"2025-09-08T14:47:40","modified_gmt":"2025-09-08T19:47:40","slug":"fixing-refused-to-connect-error","status":"publish","type":"post","link":"https:\/\/securedb.io\/kb\/?p=14812","title":{"rendered":"Fixing “Refused to Connect” Error"},"content":{"rendered":"\n

When embedding websites<\/a> into your meetings, you may come across the error: “Source Refused to Connect.” What this error means is that the source website or web app (the one you’re trying to embed) does not have our website’s URL in their Content Security Policy (CSP). If you have access to the website’s htaccess<\/code> configuration file, you can whitelist SecureDB to allow it to embed it into your meetings. Here’s how.<\/p>\n\n\n\n

Prerequisites<\/h2>\n\n\n\n

In order for this to work at all, there are two prerequisites. <\/p>\n\n\n\n

    \n
  1. The source URL must have a valid SSL\/TLS (HTTPS) and be served over that secure connection.<\/li>\n\n\n\n
  2. You have to have access to the source website’s configuration file.<\/li>\n<\/ol>\n\n\n\n

    Apache – Add SecureDB to Content Security Policy Header<\/h2>\n\n\n\n

    In Apache, there is just one line you need to add to the source website’s .htaccess<\/code> file in order to whitelist the web application to display the source URL in an iFrame embedded in your meeting.<\/p>\n\n\n\n

      \n
    1. Connect to the source website’s files<\/li>\n\n\n\n
    2. In the root directory, locate the hidden configuration file, .htaccess<\/code> (usually in \/public_html\/<\/code>)<\/li>\n\n\n\n
    3. Save a backup of that file<\/li>\n\n\n\n
    4. Add the following line of code OUTSIDE of any automatically-generated code in that file.<\/li>\n<\/ol>\n\n\n\n

      Header add Content-Security-Policy \"frame-ancestors https:\/\/*.securedb.io;\"<\/pre><\/p>\n\n\n\n
      You may see things like # php -- BEGIN cPanel-generated handler, do not edit<\/code> or # BEGIN WordPress<\/code> in that file.  Be sure to add this line OUTSIDE of the beginning and ending of those auto-generated lines.  Otherwise, it may get overwritten. <\/p>\n\n\n\n
      Refresh your website in a fresh browsing tab.  If everything works well there, return to your meeting and try to embed the source site again.<\/p>\n\n\n\n
      Nginx – Add LoopSpire to CSP Header<\/h2>\n\n\n\n
      If you’re using Nginx, you’ll need to find the configuration file.  By default you’ll find it in \/usr\/local\/nginx\/conf , \/etc\/nginx , or \/usr\/local\/etc\/nginx.  <\/p>\n\n\n\n
      Inside that file, locate the “server{}” block and add the following.  
      NOTE<\/strong>: Nginx requires these directives to end in a semicolon.  That’s why you see two of them at the end.  <\/p>\n\n\n\n
      add_header Content-Security-Policy \"frame-ancestors 'https:\/\/*.securedb.io';\";<\/pre>\n\n\n\n
      Restart your server, if required, and test if it’s working.  Then, return to your meeting and try to embed the source site again.<\/p>\n","protected":false},"excerpt":{"rendered":"
      When embedding websites into your meetings, you may come across the error: “Source Refused to Connect.” What this error means is that the source website or web app (the one […]<\/p>\n","protected":false},"author":2,"featured_media":16073,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_helpful_status":1,"footnotes":""},"categories":[46],"tags":[39],"class_list":["post-14812","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-support","tag-embedded-items"],"wps_subtitle":"","_links":{"self":[{"href":"https:\/\/securedb.io\/kb\/index.php?rest_route=\/wp\/v2\/posts\/14812","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/securedb.io\/kb\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/securedb.io\/kb\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/securedb.io\/kb\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/securedb.io\/kb\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=14812"}],"version-history":[{"count":3,"href":"https:\/\/securedb.io\/kb\/index.php?rest_route=\/wp\/v2\/posts\/14812\/revisions"}],"predecessor-version":[{"id":19130,"href":"https:\/\/securedb.io\/kb\/index.php?rest_route=\/wp\/v2\/posts\/14812\/revisions\/19130"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/securedb.io\/kb\/index.php?rest_route=\/wp\/v2\/media\/16073"}],"wp:attachment":[{"href":"https:\/\/securedb.io\/kb\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14812"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/securedb.io\/kb\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=14812"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/securedb.io\/kb\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=14812"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}