[GitHub] [superset] r3dge commented on issue #24785: HTTP_HEADERS DEAFAULT_HTTP_HEADERS and OVERRIDE_HTTP_HEADERS seem not to have any effect

["r3dge (via GitHub)" <gi...@apache.org>]

r3dge commented on issue #24785:
URL: https://github.com/apache/superset/issues/24785#issuecomment-1711587561

   Same result with this config : 
   
   TALISMAN_ENABLED = False
   SESSION_COOKIE_SAMESITE = None
   ENABLE_PROXY_FIX = True
   PUBLIC_ROLE_LIKE_GAMMA = True
   FEATURE_FLAGS = {
       "EMBEDDED_SUPERSET": True
   }
   SQLALCHEMY_DATABASE_URI = 'postgresql://postgres:postgres@db:5432/superset'
   
   HTTP_HEADERS = {'X-Frame-Options': 'ALLOWALL'}
   
   CORS_OPTIONS = {
     'supports_credentials': True,
     'allow_headers': ['*'],
     'resources':['*'],
     'origins': ['*']
   }
   
   When trying to embed the dashboard, the response header is always with x-frame-options=SAMEORIGIN, meaning the HTTP server does not allow embedding frames.
   
   My superset is deployed at localhost (no proxy).
   
   Perhaps a guniicorn setting to change ?
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org