Host not in known safe list

You can enable these lines in your bootstrap.php

Then you can copy the config/.env.example to config/.env and you have a working environment file for CakePHP

Also you could try and post whatever your JS console in your browser is showing so we can better help you.

Thanks for the response. Yparra at CakeDC figured it out. It was a mismatch between http and https.

My url is https and the debugkit was using http and the browser was blocking the iframe.

She helped me set my ‘App.fullBaseUrl’ => ‘https:<>’ with the https.
Now the iframe is displayed and the debugkit bar works.

Thanks.
Dave.

Then you probably don’t have this in your config/bootstrap.php because this makes sure to set App.fullBaseUrl to either the http or https variant of the fullBaseUrl.

Unless you use some sort of proxy which prevents your webserver from knowing its under HTTPS

My local environment also uses HTTPS and I don’t need to set that manually

Thanks. I compared my bootstrap baseurl code to that at your link.
They are the same.
Maybe, I have a proxy that is interferring.