daniel-ac-martin / NotGovUK

An implementation of the GOV.UK Design System in React that provides support for writing internal applications in addition to public ones.
https://not-gov.uk/
MIT License
27 stars 8 forks source link

Make it possible to relax various security mechanisms #950

Open daniel-ac-martin opened 4 months ago

daniel-ac-martin commented 4 months ago

e.g. Accessibility want to allow pages to be displayed in an iFrame.

daniel-ac-martin commented 3 months ago

The error:

Refused to frame because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'none'".
It's to do with the headers set (can also be X-Frame-Options: DENY, this is the same)