| @@ -1,4 +1,5 @@ | |||
| 1 | 1 | # Docker PENPOT_FRONTEND_FLAGS | |
| 2 | + | # https://github.com/penpot/penpot/discussions/1085 | |
| 2 | 3 | enable-cors | |
| 3 | 4 | ||
| 4 | 5 | # NGINX | |
portalzine / PenPot - iFrame / Cors Usage
Last active 1 month ago
portalzine
revised this gist 1 month ago
·
94ad8be
1 file changed, 1 insertion
portalzine
revised this gist 1 month ago
·
dc4bc16
1 file changed
File renamed without changes
portalzine
revised this gist 1 month ago
·
18caa81
No changes
portalzine
revised this gist 1 month ago
·
8ab253b
1 file changed
File renamed without changes
portalzine
revised this gist 1 month ago
·
929edfd
1 file changed, 10 insertions
| @@ -0,0 +1,10 @@ | |||
| 1 | + | # Docker PENPOT_FRONTEND_FLAGS | |
| 2 | + | enable-cors | |
| 3 | + | ||
| 4 | + | # NGINX | |
| 5 | + | # Remove any existing: | |
| 6 | + | # add_header X-Frame-Options SAMEORIGIN; | |
| 7 | + | ||
| 8 | + | # If the upstream app sends X-Frame-Options: | |
| 9 | + | proxy_hide_header X-Frame-Options; | |
| 10 | + | add_header Content-Security-Policy "frame-ancestors 'self' https://your-parent-domain.com" always; | |