[GitHub] [superset] e-geist commented on issue #22005: Embedding Dashboards denied when cross origin

[GitBox <gi...@apache.org>]

e-geist commented on issue #22005:
URL: https://github.com/apache/superset/issues/22005#issuecomment-1301890091

   Traefik was the "culprit": it allows securing the traffic leaving the cluster with additinal security headers.
   
   frameDeny was set to "true" (see https://doc.traefik.io/traefik/middlewares/http/headers/#framedeny) - to every HTTP response the HTTP header "x-frame-options: DENY" was added - therefore embedding the content coming from Superset was not possible.
   
   So this is not a superset issue.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org