Visual IVR and frames · Learn it in 5 minutes

IVR scripts · advanced · 12 min full read

The technical requirements say administrators can apply web page security so a Visual IVR script is not embedded in a frame where the user can be hijacked. The mechanism named is the X-Frame-Options header. The browser table in that PDF lists old versions and tells you to test others.

A visual script is still a script: prompts, branches, and a handoff. Framing is an extra threat. Do not treat a 2016-era browser row as the current support list. The PDF says to retest.

Sources and go deeper