iFrame Classification and Blocking

  • Updated


Classification of iFrames

After inserting the osano.js into the head of your website, Osano will begin automatically discovering and reporting the full URL of the scripts attempting to load on your site. It will also discover and report on specific cookies placed on your site. 

You also have the option to turn on the iFrame discovery and blocking. iFrames are treated separately from scripts and cookies and are managed within their own tab. You are not required to utilize iFrame blocking. 

Once iFrame discovery is turned on, your site has been scanned (within 2-24 hours), and Osano will provide you with a list of all iFrames loading on your site.  


Managing iFrames

iFrames are managed independently from script and cookies, but the mode of operation will mirror the "Compliance Mode" of the overall configuration. 

Consent Manager - iframes

  • Allow All [least restrictive]
    • When in "Allow All" mode, iFrames will not be discovered, identified, or blocked. They will load on your page regardless of any other Osano settings. When in "Allow All", the iFrame feature is basically TURNED OFF
  • Listener/Discovery
    • When in "Listener" mode, Osano will discover or identify iFrames for categorization but no blocking will occur.
  • Permissive
    • When in "Permissive" mode, all 'managed' iFrames will be accepted or denied based on the user's preferences. All unmanaged [in "Discovered"] iFrames will be identified and allowed regardless of consent given. 
  • Strict [most restrictive] 
    • When in "Strict" mode, all 'managed' iFrames will be accepted or denied based on the user's preferences. All unmanaged [in "Discovered"] iFrames will be BLOCKED regardless of consent given. 


iFrames will never run on a MORE RESTRICTIVE compliance mode than the configuration itself. 

If the configuration is running in "Strict" mode and blocking all unmanaged/unclassified cookies and scripts, but iFrames is running in "Listener" mode, unmanaged/unclassified iFrames will NOT be blocked, they will be identified only.


If the configuration is running in "Permissive" mode and the iFrames are running in "Strict" mode, the overall "Permissive" will take precedence, and your iFrames will also operate in "Permissive" mode. 

The configuration's overall Compliance Mode will ALWAYS take precedence when it is less restrictive than the iFrame Compliance Mode.

Consent Manager - iframes - strict



From the managed section, you can edit any aspect of already created iFrame classifications. To save changes made to an entry, be sure to click the "Save Classification" icon. 

You can create ad hoc classification rules using the green (+) at the bottom right-hand corner. These rules will apply to any matching iFrames discovered in the future. 

You can also delete iFrame classifications in this section by clicking the red trashcan icon. Once an iFrame rule has been deleted from "managed," the iFrame discovery itself will return to the "discovered" section.  


From the "Discovered" section, you can see a list of all discovered but not yet classified iFrames that we have identified on your site. 

To manage a discovered iFrame, simply change whatever information you desire, if any, and click the save icon to "Save to Managed."

This rule will then be added to the "Managed" section along with any other identified iFrames that may fall under this same rule. 

Ex. If all iFames from "Paypal" are Essential, I can create a RULE for paypal.com = Essential, and this will apply to all iFrames from URL paypal.com. 


You can use the ignore icon to hide iFrames from your list. These iFrames will be classified as "hidden" and will no longer appear unless they are removed from ignored. You can restore ignored iFrames by navigating to "Ignore" and selecting the rightmost icon. 

Note: Ignored iFrames will be allowed or blocked based on the overall "Compliance Mode" of your configuration.