Embedding a small app in Wix

[carloscz25 (Carlos Conti)]

Hi,

I am embedding in an IFRAME an app. With CUBA I get no errors. With Jmix I get a message saying the hosting domain has rejected the connection.

I presume there is some sort of restriction. Can I bypass it or are there any legal restrictions?
I don’t see any errors in the output of the app either. So have no clue where to go about.

EDIT: After a while I noticed in the chrome console the server is setting x-frame-options to sameorigin. So that seems to be the issue. However I previously set the jmix.cors.allowed-origins to ‘*’. But this has apparently no effect.

Thanks for any guidance.

Regards,
Carlos.

[pinyazhin (Roman Pinyazhin)]

Hello!

You should specify the CSP frame-ancestor directive for your Jmix application, since X-FRAME-OPTIONS is deprecated.

Take a look at this topic:

X-Frame-Options

As i can see in the example, you defined the filter-chain but didn’t add it to the SecurityConfiguration. To do this you had to override current security configuration. @EnableWebSecurity public static class DefaultFlowuiSecurityConfiguration extends FlowuiSecurityConfiguration { @Override protected void configure(HttpSecurity http) throws Exception { super.configure(http); http.headers(headers -> headers.contentSecurityPoli…