portalzine revised this gist 15 hours ago. Go to revision
1 file changed, 1 insertion
docker-penpot-cors-iframe
| @@ -1,4 +1,5 @@ | |||
| 1 | 1 | # Docker PENPOT_FRONTEND_FLAGS | |
| 2 | + | # https://github.com/penpot/penpot/discussions/1085 | |
| 2 | 3 | enable-cors | |
| 3 | 4 | ||
| 4 | 5 | # NGINX | |
portalzine revised this gist 15 hours ago. Go to revision
1 file changed
docker_penpot_cors_iframe renamed to docker-penpot-cors-iframe
File renamed without changes
portalzine revised this gist 15 hours ago. Go to revision
No changes
portalzine revised this gist 15 hours ago. Go to revision
1 file changed
penpot_cors_iframe renamed to docker_penpot_cors_iframe
File renamed without changes
portalzine revised this gist 15 hours ago. Go to revision
1 file changed, 10 insertions
penpot_cors_iframe(file created)
| @@ -0,0 +1,10 @@ | |||
| 1 | + | # Docker PENPOT_FRONTEND_FLAGS | |
| 2 | + | enable-cors | |
| 3 | + | ||
| 4 | + | # NGINX | |
| 5 | + | # Remove any existing: | |
| 6 | + | # add_header X-Frame-Options SAMEORIGIN; | |
| 7 | + | ||
| 8 | + | # If the upstream app sends X-Frame-Options: | |
| 9 | + | proxy_hide_header X-Frame-Options; | |
| 10 | + | add_header Content-Security-Policy "frame-ancestors 'self' https://your-parent-domain.com" always; | |