search

B2rana / bagisto-mediamanager

MIT License
7 stars 7 forks source link

iFrame not loaded in TinyMCE editor because of X-Frame-Options #6

Closed Arachnos closed 3 years ago

Arachnos commented 3 years ago

Hi everyone, The iframe with mediamanager-popup is not loaded because of CORS policy.

How can I enable the Laravel Frameguard that set X-Frame-Options to SAMEORIGIN ?

B2rana commented 3 years ago

Hi Arachnos,

To resolve the issue, please change the value of "X-Frame-Options" from "DENY" to "SAMEORIGIN" in this file https://github.com/bagisto/bagisto/blob/v1.3.2/packages/Webkul/Core/src/Http/Middleware/SecureHeaders.php

Arachnos commented 3 years ago

Hi B2rana, I've solved the issue, by cloning and replacing the SecureHeaders in Kernel.php a new class in my package.

Thanks ;-)