search

miniflux / v2

Minimalist and opinionated feed reader
https://miniflux.app
Apache License 2.0
6.74k stars 713 forks source link

Alter X-Frame-Options header #1200

Open justSem opened 3 years ago

justSem commented 3 years ago

While implementing Miniflux as an external application in an Nextcloud environment I came across the fact that it doesn't seem possible to alter the X-Frame-Options header miniflux sends along in it's daemon.

This in return prevents the nextcloud instance from embedding the service as a frame.

A semi-solution is to instruct nginx to remove the header and re-add it's own value after it. i.e. proxy_hide_header X-Frame-Options proxy_add_header X-Frame-Options "allow-from https://nextcloud.instance.domain" always;

It would be a more neat solution to be able to alter this header, or just disable it in the miniflux configuration

ajm1014 commented 2 years ago

Agreed, this feature would be a welcome addition!

nikolasdmtr commented 2 months ago

I tried adding Miniflux as an iframe to a selfhosted dashboard and came upon this problem.