Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Header X-frame-options "sameorigin" gera erro em dashboard apps #179

Open
matheusmsampa opened this issue Nov 27, 2024 · 0 comments
Open

Comments

@matheusmsampa
Copy link

Describe the bug

Ao tentar utilizar um app de dashboard, um erro no console do navegador acusa o erro "Refused to display 'https://www.*****.com.br/' in a frame because it set 'X-Frame-Options' to 'sameorigin'. Esse erro é causado principalmente porque o atributo "ALLOWALL" do "X-Frame-Options" não existe mais, tendo sido substituido por "ALLOW-FROM". Essa configuração está presente no arquivo config/application.rb e basta removê-la, uma vez que na ausência do "X-Frame-Options" todas as origens são permitidas, mas ao configurá-lo o padrão é "sameorigin".

To Reproduce

1- Basta criar um app de dashboard e tentar abri-lo em uma conversa.
2- A aba do app não carrega
3- Abra o console do navegador e veja o erro

Expected behavior

No response

Environment

Docker

Cloud Provider

Other [please specify in the description]

Platform

Browser

Operating system

Windows 10

Browser and version

Chrome:latest

Docker (if applicable)

No response

Additional context

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant