Make X-Frame-Options configurable

provectus / kafka-ui

Open-Source Web UI for Apache Kafka Management

Apache License 2.0

8.96k stars 1.1k forks source link

Make X-Frame-Options configurable #3905

Open benmarte opened 1 year ago

benmarte commented 1 year ago

Issue submitter TODO list

[X] I've searched for an already existing issues here
[X] I'm running a supported version of the application which is listed here and the feature is not present there

Is your proposal related to a problem?

I want to be able to open kafka-ui in an iframe by setting the X-Frame-Options.

Describe the feature you're interested in

I want to be able to open kafka-ui in an iframe by setting the X-Frame-Options.

Describe alternatives you've considered

Using an nginx proxy but it would be nice to still be able to configure the x-frame-options via an env var or some other setting.

Version you're running

v0.7.0

Additional context

No response

github-actions[bot] commented 1 year ago

Hello there benmarte! 👋

Thank you and congratulations 🎉 for opening your very first issue in this project! 💖

In case you want to claim this issue, please comment down below! We will try to get back to you as soon as we can. 👀

rr-jino-jose commented 3 days ago

I want to be able to open kafka-ui in an iframe by setting the X-Frame-Options.

I am looking for same option. I am using it with ingress controller so wonder if its already available or not?

I tried this option but doesn't seems to be working

nginx.ingress.kubernetes.io/configuration-snippet: |
      more_set_headers "X-Frame-Options: SAMEORIGIN";
      more_set_headers "Content-Security-Policy: frame-ancestors 'self' http://your-app-domain.com";

in console it says

The loading of “http://kafka-ui.jino-np.rr-it.com/” in a frame is denied by “X-Frame-Options“ directive set to “deny“.