redash
redash copied to clipboard
Iframe CSRF Token Missing
HTML:
Nginx:
server { listen 8080; server_name _; location / { proxy_pass http://xxx:5000; more_set_headers "Access-Control-Allow-Origin: * "; more_set_headers "X-Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval'; font-src 'self' data:; img-src 'self' http: https: data: blob:; object-src 'none'; frame-src redash.io;"; more_set_headers "Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval'; font-src 'self' data:; img-src 'self' http: https: data: blob:; object-src 'none'; frame-src redash.io;"; more_set_headers "X-Frame-Options: xxx"; more_set_headers "Set-Cookie: $sent_http_set_cookie; HttpOnly; Secure; SameSite=None"; } }