Session vars and IFRAME

[azhotdish]

Strange issue going on - I have a page that includes two embedded iframes (the objects are Flash graphs). When a user clicks inside the iframe (or hovers over, in some cases), the session variables for the app disappear. I tried looking to see if the cftoken or cfid get reset but they don't, which is why it's weird to me that they're disappearing. Any ideas?

CFMX Version: 6,1,0,83762
IIS 5

[insuractive]

Check to see if you are losing your cookies in your iFrames due to browser security settings.

I know IE has a problem with retaining cookies if the server doesn't have a proper privacy policy set in IIS.

[azhotdish]

Do you know what setting exactly needs to be changed?

[insuractive]

In our particular case, we had to update our IIS to include a custom HTTP header containing a P3P privacy policy. Google "p3p privacy policy" to learn how to generate a privacy policy.