timvisee / send

:mailbox_with_mail: Simple, private file sharing. Mirror of https://gitlab.com/timvisee/send
https://send.vis.ee
Mozilla Public License 2.0
4.77k stars 275 forks source link

Allow Embedding in iframe #145

Open lukewegryn opened 1 year ago

lukewegryn commented 1 year ago

Is there a configuration option to allow the application to be used in an iframe by another domain? I see the x-frame-options: SAMEORIGIN in the response, preventing this. Is there a configuration option that can be used to set the x-frame-options header to a different value?

timvisee commented 1 year ago

There is no such option right now.

All currently available options can be found in config.js

jfg commented 1 year ago

Hello @lukewegryn, Have you found a solution ?

ddb9797 commented 8 months ago

bump

timvisee commented 8 months ago

Is there any good use case to allow this? This is commonly blocked as bad practice from a security standpoint.

ddb9797 commented 7 months ago

I wanted to embed an instance in my website. So for aesthetical reasons