> Can you think of a reason why IDP 5 would work, and IDP 4 doesn't? Nope, it's exactly the same. The answer would have to be that the CSP stuff isn't there even though you're assuming it must be. The lack of visibility due to the CSRF difference is I assume masking that. -- Scott