X-Frame-Options

d.kremnev · August 2, 2023, 7:21am

As i can see in the example, you defined the filter-chain but didn’t add it to the SecurityConfiguration.
To do this you had to override current security configuration.

    @EnableWebSecurity
    public static class DefaultFlowuiSecurityConfiguration extends FlowuiSecurityConfiguration {

        @Override
        protected void configure(HttpSecurity http) throws Exception {
            super.configure(http);

            http.headers(headers ->
                    headers.contentSecurityPolicy(secPolicy ->
                            secPolicy.policyDirectives("frame-ancestors localhost:8080")
                    )
            );
        }
    }

Example Project is attached:
testIFrame.zip (436.1 KB)

Regards,
Dmitriy