docker-drawio icon indicating copy to clipboard operation
docker-drawio copied to clipboard

CSP for iframe usage in e.g. outline

Open Farnsi opened this issue 2 years ago • 2 comments

Try to add CSP-Header with variable DRAWIO_CSP_HEADER frame-ancestors 'self' https://myserver.xyz;, or frame-ancestors *; but none seems to change anything.

Did somebody have an idea?

Add Diagram in Outline works, but as soon as i click "create" i got the error:

 INFO SecurityError undefined undefined undefined DOMException: Failed to execute 'showSaveFilePicker' on 'Window': Cross origin sub frames aren't allowed to show a file picker.
    at App.showSaveFilePicker (https://myserver.xyz/js/app.min.js:13026:288)
    at App.createFile (https://myserver.xyz/js/app.min.js:13056:158)
    at https://myserver.xyz/js/app.min.js:11253:435
    at EditorUi.pickFolder (https://myserver.xyz/js/app.min.js:12029:6)
    at App.pickFolder (https://myserver.xyz/js/app.min.js:13101:364)
    at J (https://myserver.xyz/js/app.min.js:11253:402)
    at https://myserver.xyz/js/app.min.js:11275:353
    at HTMLButtonElement.<anonymous> (https://myserver.xyz/js/app.min.js:196:249)

drawio-outline

Farnsi avatar Nov 28 '23 11:11 Farnsi

Same issue, image: 23.0.2. DRAWIO_CSP_HEADER goes no effect.

BigTows avatar Jan 29 '24 19:01 BigTows

Please write as a full bug report.

davidjgraph avatar Jan 31 '24 23:01 davidjgraph