penpot_cors_iframe
· 295 B · Text
Raw
# Docker PENPOT_FRONTEND_FLAGS
enable-cors
# NGINX
# Remove any existing:
# add_header X-Frame-Options SAMEORIGIN;
# If the upstream app sends X-Frame-Options:
proxy_hide_header X-Frame-Options;
add_header Content-Security-Policy "frame-ancestors 'self' https://your-parent-domain.com" always;
| 1 | # Docker PENPOT_FRONTEND_FLAGS |
| 2 | enable-cors |
| 3 | |
| 4 | # NGINX |
| 5 | # Remove any existing: |
| 6 | # add_header X-Frame-Options SAMEORIGIN; |
| 7 | |
| 8 | # If the upstream app sends X-Frame-Options: |
| 9 | proxy_hide_header X-Frame-Options; |
| 10 | add_header Content-Security-Policy "frame-ancestors 'self' https://your-parent-domain.com" always; |