docker-penpot-cors-iframe
· 347 B · Text
Raw
# Docker PENPOT_FRONTEND_FLAGS
# https://github.com/penpot/penpot/discussions/1085
enable-cors
# NGINX
# Remove any existing:
# add_header X-Frame-Options SAMEORIGIN;
# If the upstream app sends X-Frame-Options:
proxy_hide_header X-Frame-Options;
add_header Content-Security-Policy "frame-ancestors 'self' https://your-parent-domain.com" always;
| 1 | # Docker PENPOT_FRONTEND_FLAGS |
| 2 | # https://github.com/penpot/penpot/discussions/1085 |
| 3 | enable-cors |
| 4 | |
| 5 | # NGINX |
| 6 | # Remove any existing: |
| 7 | # add_header X-Frame-Options SAMEORIGIN; |
| 8 | |
| 9 | # If the upstream app sends X-Frame-Options: |
| 10 | proxy_hide_header X-Frame-Options; |
| 11 | add_header Content-Security-Policy "frame-ancestors 'self' https://your-parent-domain.com" always; |