# Manage Content Button not working if not using Experience Manager?

**URL:** <https://community.bloomreach.com/t/manage-content-button-not-working-if-not-using-experience-manager/4203>\
**Category:** Experience Manager (PaaS/OnPrem)\
**Created:** [December 7, 2023, 8:01am UTC](https://community.bloomreach.com/t/manage-content-button-not-working-if-not-using-experience-manager/4203 "2023-12-07T08:01:39Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![TimoPot](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/timopot/32/1832_2.png) [@TimoPot](https://community.bloomreach.com/u/TimoPot)\
**Post date:** [December 7, 2023, 8:01am UTC](https://community.bloomreach.com/t/manage-content-button-not-working-if-not-using-experience-manager/4203/1 "2023-12-07T08:01:39Z")

</div>

Hi there,

We are using:

- PaaS
- Content (not the Experience Manager)
- Angular SDK

I’m trying to use the Manage Content Button as described on [@bloomreach/ng-sdk - npm](https://www.npmjs.com/package/@bloomreach/ng-sdk)  
It doesn’t say it can work for Experience Manager only.

But I can’t get it to work. I want a button to show so that the editors can edit the current visible document in the preview.  
Is there a way to achieve this or is the Manage Content Button only to be used when one is using the Experience Manager?

Thx.

Timo Pot

Is it possible to

---

<div class="post-metadata">

**Author:** ![jasper.floor](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/jasper.floor/32/28_2.png) [@jasper.floor](https://community.bloomreach.com/u/jasper.floor)\
**Post date:** [December 7, 2023, 9:41am UTC](https://community.bloomreach.com/t/manage-content-button-not-working-if-not-using-experience-manager/4203/2 "2023-12-07T09:41:25Z")

</div>

Hi @TimoPot,

the manage content button can indeed only be used in the experience manager.

---

<div class="post-metadata">

**Author:** ![TimoPot](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/timopot/32/1832_2.png) [@TimoPot](https://community.bloomreach.com/u/TimoPot)\
**Post date:** [December 14, 2023, 6:00pm UTC](https://community.bloomreach.com/t/manage-content-button-not-working-if-not-using-experience-manager/4203/3 "2023-12-14T18:00:51Z")

</div>

Then I’d like to maken an feature request to enable it also for when using the content editor only.

---

<div class="post-metadata">

**Author:** ![jeroen.hoffman](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/jeroen.hoffman/32/43_2.png) [@jeroen.hoffman](https://community.bloomreach.com/u/jeroen.hoffman)\
**Post date:** [December 15, 2023, 3:14pm UTC](https://community.bloomreach.com/t/manage-content-button-not-working-if-not-using-experience-manager/4203/4 "2023-12-15T15:14:46Z")

</div>

Hi Timo,

You’re saying that you use the content editor only and not the Experience Manager (a.k.a. preview), so I’m wondering what the ask is. The Manage Content Button is rendering special markup in your site implementation which is then picked up by the preview, so it lives only there.

Are you maybe asking for a button in the content perspective to open the Experience Manager with the right side panel open on that document?

Regards, Jeroen

---

<div class="post-metadata">

**Author:** ![TimoPot](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/timopot/32/1832_2.png) [@TimoPot](https://community.bloomreach.com/u/TimoPot)\
**Post date:** [December 16, 2023, 12:53pm UTC](https://community.bloomreach.com/t/manage-content-button-not-working-if-not-using-experience-manager/4203/5 "2023-12-16T12:53:54Z")

</div>

Yes we’re using the content editor only and not the Exp. manager.

And when using the content editor we still can open the preview.  
In the preview can navigate to other pages. So what I’m asking for is a button  
that opens the content editor for the url that is currently visible in the preview.

My coworkers who edit the site would benefit greatly it that was possible.  
Now they have to lookup the page they want to edit.

---

<div class="post-metadata">

**Author:** ![machak](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/machak/32/1298_2.png) [@machak](https://community.bloomreach.com/u/machak)\
**Post date:** [December 18, 2023, 10:42am UTC](https://community.bloomreach.com/t/manage-content-button-not-working-if-not-using-experience-manager/4203/6 "2023-12-18T10:42:42Z")

</div>

You should be able to create a link when you are in preview mode ( [Detect Preview or Channel Manager Request Context - Bloomreach Experience Manager (PaaS/Self-Hosted) - The Fast and Flexible Headless CMS](https://xmdocumentation.bloomreach.com/library/concepts/channels/jsp-code-to-find-out-whether-a-request-is-a-preview-or-cms-request.html) )  
and set target attribute to \_top…

We used to have a tag for this in previous versions, before visual editing was intrduced:

> <https://github.com/bloomreach/brxm/blob/brxm-12.6.26/site-toolkit/client/src/main/java/org/hippoecm/hst/tag/HstCmsEditLinkTag.java>

---

<div class="post-metadata">

**Author:** ![TimoPot](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/timopot/32/1832_2.png) [@TimoPot](https://community.bloomreach.com/u/TimoPot)\
**Post date:** [December 22, 2023, 11:01am UTC](https://community.bloomreach.com/t/manage-content-button-not-working-if-not-using-experience-manager/4203/7 "2023-12-22T11:01:39Z")

</div>

But we don’t use templating.  
We have a headless cms setup.  
Cms: only the content editor which has a preview button so we can show our FE in the preview.  
FE: Angular

---

<div class="post-metadata">

**Author:** ![machak](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/machak/32/1298_2.png) [@machak](https://community.bloomreach.com/u/machak)\
**Post date:** [December 22, 2023, 1:10pm UTC](https://community.bloomreach.com/t/manage-content-button-not-working-if-not-using-experience-manager/4203/8 "2023-12-22T13:10:34Z")

</div>

A link is a link, no? How/where you render it is not really relevant…

---

<div class="post-metadata">

**Author:** ![TimoPot](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/timopot/32/1832_2.png) [@TimoPot](https://community.bloomreach.com/u/TimoPot)\
**Post date:** [January 3, 2024, 7:01am UTC](https://community.bloomreach.com/t/manage-content-button-not-working-if-not-using-experience-manager/4203/9 "2024-01-03T07:01:21Z")

</div>

True. But can we detect in our headless front-end that we are in preview mode?

---

<div class="post-metadata">

**Author:** ![TimoPot](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/timopot/32/1832_2.png) [@TimoPot](https://community.bloomreach.com/u/TimoPot)\
**Post date:** [January 4, 2024, 8:43am UTC](https://community.bloomreach.com/t/manage-content-button-not-working-if-not-using-experience-manager/4203/10 "2024-01-04T08:43:10Z")

</div>

I’ve already figured out how to see that you’re in preview mode.

I added a link to my page. Clicking it will activate the link to the same page in the content-editor.  
I use target=“\_parent” in the a tag. Thus I want to open the page in the active tab so that I remain in current browser tab with the cms. That is the most logic thing to do.

Unfortenately it does not work. The preview is an iframe in which our headless FE is served. Because it is headless is has an other domain (other portnumer). Opening the link in \_parent is blocked because of cross-domain security.  
The only thing I can do now is open the link in a new browser tab.  
Of course this is not what one want because now I open a new browser tab with the cms while I already have a browser tab with the cms.

Is there a way to overcome this issue?  
If not then I again ask for a feature request to solve above problem.

---

<div class="post-metadata">

**Author:** ![machak](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/machak/32/1298_2.png) [@machak](https://community.bloomreach.com/u/machak)\
**Post date:** [January 4, 2024, 11:58am UTC](https://community.bloomreach.com/t/manage-content-button-not-working-if-not-using-experience-manager/4203/11 "2024-01-04T11:58:15Z")

</div>

You will need to add “X-Frame-Options: ALLOW-FROM [https://foo.com/](https://foo.com/)”  
(where [foo.com](http://foo.com) is your SPA domain).  
see:  
[Configure Security Response Headers - Bloomreach Experience Manager (PaaS/Self-Hosted) - The Fast and Flexible Headless CMS](https://xmdocumentation.bloomreach.com/library/concepts/security/configure-security-response-headers.html)

BTW: I believe that using \_parent as target will render URL within navapp frame,most probably you will need to use \_top for the target attribute.

Regarding feature request: you can file an issue in JIRA: [https://issues.onehippo.com/projects/CMS/](https://issues.onehippo.com/projects/CMS/)  
I am not sure how much attention it will get because this functionality is explicitly removed in favor of “in-channel/inline” editing.

---

<div class="post-metadata">

**Author:** ![TimoPot](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/timopot/32/1832_2.png) [@TimoPot](https://community.bloomreach.com/u/TimoPot)\
**Post date:** [January 4, 2024, 12:42pm UTC](https://community.bloomreach.com/t/manage-content-button-not-working-if-not-using-experience-manager/4203/12 "2024-01-04T12:42:51Z")

</div>

Thanks. It works now, and yes with \_top.

You said: ‘I am not sure how much attention it will get because this functionality is explicitly removed in favor of “in-channel/inline” editing.’

I’m confused. Bloomreach is promotion headless solution and it is what they adviced us to do.  
But the headless part cannot work under /site (or we don’t know how.)

---

<div class="post-metadata">

**Author:** ![TimoPot](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/timopot/32/1832_2.png) [@TimoPot](https://community.bloomreach.com/u/TimoPot)\
**Post date:** [January 4, 2024, 12:47pm UTC](https://community.bloomreach.com/t/manage-content-button-not-working-if-not-using-experience-manager/4203/13 "2024-01-04T12:47:38Z")

</div>

btw:  
ALLOW-FROM origin Deprecated  
This is an obsolete directive. Modern browsers that encounter response headers with this directive will ignore the header completely. The Content-Security-Policy HTTP header has a frame-ancestors directive which you should use instead.

Will it work with CSP frame-ancestors?
