#8012 Bad X-Frame-Options header on docs.stg.pagure.org
Closed: Fixed a year ago by pingou. Opened a year ago by jlanda.

I'm getting

Load denied by X-Frame-Options: https://pagure.io/ does not permit framing by https://stg.pagure.io/docs/pagure/.

when I try to visit the embedded docs on stg.pagure.io .

The problem is here: https://infrastructure.fedoraproject.org/cgit/ansible.git/tree/roles/pagure/frontend/templates/securityheaders.conf?id=72e5a61#n1 where https://pagure.io is hardcoded as unique origin for both environments.

I'll try to upload a patch here when kids allows me :)

Looks good to me, applied :)

X-Frame-Options: ALLOW-FROM https://stg.pagure.io/

Fixed and deployed :)

Metadata Update from @pingou:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

a year ago

Login to comment on this ticket.