[SCALE RC2] WebUI Prevents Loading in I-frame

Description

As of Scale RC.2, the WebUI can no longer be loaded within a frame. The console in Chrome shows the following error:

Refused to display 'https://truenas.mydomain.com/' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

In prior SCALE versions as recently as RC1-2 it was possible to load in a frame. This is commonly used in setups with applications like Organizr.

If this was added to RC2 for security purposes, there should be an option in preferences to allow loading the WebUI in a frame.

Problem/Justification

None

Impact

None

Activity

Show:

ksimm1 January 23, 2022 at 9:37 PM

This is marked as resolved w/ a corresponding PR, but how can an end-user set x-frame-options to allow so that it SCALE can be loaded within an iframe again? Will there be a configuration option in the WebUI?

Bug Clerk January 7, 2022 at 10:39 AM

ksimm1 January 3, 2022 at 11:55 PM

It's related to the changes to X-frame-options in this PR : https://github.com/truenas/middleware/pull/7752

Michelle Johnson December 22, 2021 at 5:06 PM

This appears to be a feature request or suggestion, not a bug. Escalating to Engineering for additional triage.

Michelle Johnson December 22, 2021 at 5:05 PM

Thank you for your submission, !

Your duplicate ticket https://jira.ixsystems.com/browse/NAS-113944 has been closed.

This ticket is now in the queue to be reviewed. An Engineering representative will update with any questions or details in the near future.

Complete

Details

Assignee

Reporter

Labels

Time remaining

0m

Components

Fix versions

Affects versions

Priority

Katalon Platform

Created December 22, 2021 at 4:26 PM
Updated July 1, 2022 at 2:42 PM
Resolved January 7, 2022 at 11:36 AM