redash icon indicating copy to clipboard operation
redash copied to clipboard

Iframe CSRF Token Missing

Open 985958118 opened this issue 1 year ago • 6 comments
trafficstars

HTML:

Nginx:

server { listen 8080; server_name _; location / { proxy_pass http://xxx:5000; more_set_headers "Access-Control-Allow-Origin: * "; more_set_headers "X-Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval'; font-src 'self' data:; img-src 'self' http: https: data: blob:; object-src 'none'; frame-src redash.io;"; more_set_headers "Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval'; font-src 'self' data:; img-src 'self' http: https: data: blob:; object-src 'none'; frame-src redash.io;"; more_set_headers "X-Frame-Options: xxx"; more_set_headers "Set-Cookie: $sent_http_set_cookie; HttpOnly; Secure; SameSite=None"; } }

image image

985958118 avatar Jul 26 '24 02:07 985958118